Cyber-criminals can access free kits to aid them in launching phishing attacks, an online security resource has discovered.
The kits, discovered by PandaLabs, could allow the thieves to send out mass fraudulent emails mimicking bank web pages, online pay platforms and email accounts in order to trick people into handing over financial and personal data.
From the kit a criminal can access two files. One file allows the creation of spoof emails made to look like they have come from official sources and the other allows criminals to create mock-ups of genuine web pages.
The phishing attack takes place when the criminal spams internet users with the email, with a link to the fake web page. Users who follow the link will be asked to enter their personal data. Lists of email addresses can also be purchased from the internet.
Technical director of PandaLabs Luis Corrons said that the amazing thing was that the kits were free.
“Due to the simplicity of the tools, the number of phishing attacks increases, causing companies and consumers large losses,” said Mr Corrons.
Last week spam celebrated its 30th anniversary.
If you enjoyed this post, make sure you subscribe to my RSS feed!
