Intelligence from our Anti-Fraud Command Center

Each month the RSA Anti-Fraud Command Center issues the RSA Online Fraud Report that includes a monthly highlight as well as over a half dozen charts with analyses featuring phishing trends such as top ten countries attacked, most used attacked vectors, and other data from the Center’s global phishing repository.

The Anti-Fraud Command Center is a 24x7 war-room that detects, tracks, blocks and shuts down phishing, pharming and Trojan attacks perpetrated by online fraudsters. An effective countermeasure against online fraud, RSA FraudAction has shut down more than 160,000 illicit web sites across 140 countries to date, protecting more than 320 organizations. Its fraud analysts shut down websites hosting online attacks, deploy countermeasures, and conduct extensive forensic work to help catch fraudsters and prevent future threats – significantly reducing the average lifetime of an online attack.

We invite you to review the reports to keep up with the latest threats. You are welcome to leverage the information for your own documents and other resources. RSA requests that any specific data or content be attributed to the "RSA Anti-Fraud Command Center" as the source.


Receive RSA's Monthly Online Fraud Reports



RSA Online Fraud Reports


Friday, May 29, 2009
The number of phishing attacks in April 2009 dropped slightly (seven percent) from March 2009. In March 2009 the number of attacks had increased 15 percent from February 2009 due to the increase in standard attacks and had marked the highest volume in since mid-2008.
Thursday, May 21, 2009
The total number of phishing attacks detected by the RSA Anti-Fraud Command Center in February 2009 rose by 18 percent when compared to January 2009 – representing an increase of 1,500 attacks.
Friday, March 06, 2009
The year 2009 began with a slight increase in the total number of phishing attacks detected by the RSA Anti-Fraud Command Center. The number of attacks that were directly instigated by the Rock Phish gang, combined with other fast-flux attacks, rose by 20%. This constituted most of the increase in phishing attacks over the course of January.
Tuesday, February 17, 2009
The vast reduction in the rate of phishing attacks during the July-to-September timeframe was attributed to the fact that the Rock Phish Gang had abandoned its previous infrastructure and started to use the Asprox botnet, as noted by the RSA FraudAction Research Lab on September 4 on its blog on RSA’s Speaking of Security.
Monday, December 22, 2008
After a steady and remarkable increase in phishing attacks from August through October 2008 (an increase of 3481 attacks in total), the rate of increased phishing attacks between October 2008 and November 2008 slowed down dramatically – increasing only by 46 attacks.
Friday, November 14, 2008
During October 2008, U.S. and U.K. brands remained the most widely targeted brands, with the U.S. holding steady and the U.K. increasing only by 1%. Australia, Canada, Spain, India, Italy and South Africa retained steady rates as compared to September 2008, with only a few countries altering by one percentage point. Poland entered the list for the first time this month. Mexico entered the list at the 10th position, replacing Columbia as the most targeted country in Latin America.
Friday, November 14, 2008
During September 2008, U.S. and U.K. brands remained the most widely targeted brands, with an increase in the rate attacks by 4% and 2% over August 2008, respectively. The rate of attacks against Canadian brands climbed 2%, moving its position on the chart from seventh to third place. Conversely, the rate of attacks against Italian brands declined 6%, moving its position on the chart from third to sixth place. New Zealand entered the list this month for the first time.
Tuesday, October 07, 2008
The distribution of attacked entities remained relatively similar to that of previous months. U.S. brands were the most dominant, and those from the United Kingdom, Italy, Spain, Australia, Canada and South Africa remained relatively the same. South Africa has become a more common entity on this list. India and Nigeria both entered the list this month, with India most notably appearing in fifth place.
Wednesday, August 13, 2008
During July 2008, the distribution of attacked global brands remained relatively similar to that of previous months. Consistent with prior months, U.S. brands were the most attacked - receiving 60% of the total phishing attacks during the month. Brazil dropped to tenth place after entering the list for the first time last month, when it was ranked third. Canada, Italy, Spain, Australia and Germany maintained similar positions to prior months.
Friday, July 11, 2008
The U.S. brands remain in first position for the 17th consecutive month. The most interesting development in June was Brazil making the list and being in the 3rd position. Brazil had a large impact this month and follows the trend we have seen of more South American brands under attack. The remainder of the list reflects he distribution of attacked entities relatively similar to that of previous months. As usual, U.S. brands are the most dominant, followed by the UK brands. These two are usually followed by Spain, Italy, Canada, Australia and South Africa, who are also becoming a regular member in this list.
Tuesday, June 10, 2008
The distribution of attacked entities remained relatively similar to that of previous months. As usual, U.S. brands are dominant, followed by U.K. brands for the 16th consecutive month.
Thursday, May 08, 2008
The distribution of attacked entities remained relatively similar to that of previous months. As usual, U.S. brands continue to dominate, followed by UK brands for the 15th consecutive month. These are followed, as usual, by Spain, Italy and Canada. Note that as phishing increasingly spreads into the Asia-Pacific region, both Australia and New Zealand made the list in both March and April.
*Note: We have changed the naming conventions for the Monthly Online Fraud Reports to reflect the month in which the reports are published