“The number of fraudulent websites and servers used in attacks has more than tripled since 2012, and more than 50 per cent of the total number of individual targets were fake copies of the websites of banks and other credit and financial organizations,” Kaspersky said.
The attackers often use emails purportedly from trusted organizations — Yahoo!, Google, Facebook and Amazon are top targets, according to the report.
Online game services, online payment systems, and the websites of banks and other credit and financial organizations are also commonly used to disguise phishing attempts.
Kaspersky said phishing has become a preferred method of cybercriminals.
“Although the specific targets of phishing attacks vary, the end goal of all malicious users engaged in this type of malicious activity is ultimately the same: to make money illegally,” the report said.
“This goal is achieved either by directly stealing cash from the victim, as in the case with fake online banking service pages, online storefronts, and subscriptions to online games.”
But attacks may also employ a more indirect approach, including the sale of stolen databases on the black market.
“A large collection of user data may come in handy for malicious users for a number of different fraudulent schemes involving spam mailings and the spread of malware,” the report said.
The countries most often hit by phishing attacks were Russia, the United States, India, Vietnam and the Britain.
The location of “hostile servers” was most frequently in the US, Britain, Germany, Russia and India, Kaspersky said.