Thousands of Internet users have faced phishing attacks on a daily basis, a computer security company has revealed.
The survey conducted by Kaspersky Lab states that the number of Internet users who faced phishing attacks over the last 12 months has grown from 19.9 million to 37.3 million worldwide, an increase of 87 %. Facebook, Yahoo, Google and Amazon are among main targets of cybercriminals.
According to the Enterprise Innovation, Kaspersky Lab specialists compared data on phishing attacks from over 50 million Kaspersky Security Network users between May 1, 2012 and April 30, 2013 with figures for the equivalent period of 2011-2012.
Results show that in 2012-2013, 102,100 people worldwide each day were affected by phishing attacks, twice as many as in 2011-2012.
In Russia, 19,000 users were attacked each day, 12,000 in the US, 10,000 in India, 6,000 in
Germany, 3,000 in France, and another 3,000 in the UK.
The survey showed that email is no longer the most common delivery mechanism for phishing emails.
Nearly 88% of attacks came from links to phishing pages which people followed while using a web browser, Skype, or otherwise interacting with the computer.
“The volume and variety of phishing attacks detected during the survey indicates that phishing is not merely one tool among many for the illegal enrichment of fraudsters, but represents a significant and visible threat. These attacks are relative simple to organize and are demonstrably effective, attracting an increasing number of cybercriminals to this type of illegal activity. The volume of phishing attacks, which according to Kaspersky Security Network nearly doubled in a single year, confirms this trend”, said Nikita Shvetsov, Deputy CTO (Research) at Kaspersky Lab.
Vietnam, the United States, India and Germany have the greatest number of attacked users, and the total number of attacks in these regions has doubled since last year, the report added.
What is phishing?
Phishing is a form of Internet fraud in which criminals create a fake copy of a popular site (an email service, an Internet banking website, a social networking site, etc.) and try to lure the users to these rogue web pages. The unsuspecting user enters their login information and passwords into these carefully forged websites as they normally would, but these access credentials are instead sent to the cyberiminals. The scammers can then use this stolen personal information, bank credentials, or passwords to steal the users’ money, to distribute spam and malware via the compromised email or social networking accounts, or they can simply sell their databases of stolen passwords to other criminals.
Main Research Findings
Users
* In 2012-2013, phishers launched attacks affecting an average of 102,100 people worldwide each day – twice as many as in 2011-2012.
* Phishing attacks most often target users in Russia, the USA, India, Vietnam and the UK.
* Vietnam, the USA, India and Germany have the greatest number of attacked users – the total number of attacks in these regions has doubled since last year.
Attackers
* The majority of the servers hosting phishing pages were registered in the USA, the UK, Germany, Russia and India.
* The number of unique attack sources – such as fraudulent websites and servers – has more than tripled from2012-2013.
* Over half (56%) of all identified unique attack sources were found in just 10 countries, which means the attackers have a small set of preferred “home bases” to launch their attacks.
Targets
The services of Yahoo!, Google, Facebook and Amazon were most often attacked by phishers – 30% of all registered incidents involved fake versions of their sites.
Over 20% of all phishing attacks mimicked banks and other financial organizations.
American Express, PayPal, Xbox live, Twitter and etc. are in Top 30 most targeted sites.