Anti-Phishing Working Group
- Cross-industry global group supporting those tackling the phishing menace. Provides advice on anti-phishing controls and information on current trends.
- http://www.antiphishing.org/
Netcraft - Browser toolbar to report and block phishing sites identified by the toolbar user community. Identifies in which countries websites are hosted as further clues to their authenticity. - http://toolbar.netcraft.com/
OCC Bulletin 2005-24 - Advice to banks from the Comptroller of the Currency Administrator of National Banks on how to deal with phisher attacks. - http://www.occ.treas.gov/ftp/bulletin/2005-24.pdf
PhishTank - Clearing house for information about phishing plus an open API to integrate anti-phishing data into applications. - http://www.phishtank.com/
CallingID - Anti-phishing browser toolbar that runs 54 checks against websites visited and raises alerts if it detects phishing or dubious practices. - http://www.callingid.com
Gallery of Phishing Scams - A gallery of phishing messages claiming to come from banks, credit card companies, and auction houses. Learn to recognize fraud by studying these examples. - http://worldwidespam.info/phishing/
Bank Safe Online - Advice from a UK banking industry group about phishing, money mules and Trojans. - http://www.banksafeonline.org.uk/
Stay Safe Online - National Cyber Security Alliance website advises consumers on basic information security practices to avoid phishing and other forms of attack. - http://www.staysafeonline.org/
Why Phishing Works - Research paper from Harvard evaluated the deceptiveness of typical phishing emails. - http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf
GeoTrust TrustWatch - Antiphishing browser extensions identify the certification status of sites listed in Google search outputs. - http://www.trustwatch.com/
Castlecops - The Phishing Incident Reporting and Termination team aims to respond quickly to phishing sites and get them taken offline as soon as practicable. - http://wiki.castlecops.com/PIRT
OnGuard Online - Phishing section of an informational website run by the US Federal Trade Commission. Offers advice on how to spot, avoid and report phishing attacks. - http://onguardonline.gov/phishing.html
GralicWrap - Free anti-phishing software uses fraudulent site reports submitted by users to build a global blacklist. - http://www.gralicwrap.com
Anti Phishing Technology - Report explains control measures that might be suitable for banks etc. to protect themselves and their customers against phishing attacks. - https://antiphishing.kavi.com/events/Conference_Notes/phishing-sfectf-report.pdf
My Way News - Article about phishers using stolen bank customer secrets to create duplicate bank cards and withdraw cash from ATMs. - http://apnews.myway.com//article/20050803/D8BO13PO0.html
The Phishing Guide - Understanding and Preventing Phishing Attacks - White paper explains how phishing works and outlines control measures that can be taken by individuals and institutions to minimize the risk. - http://www.ngssoftware.com/papers/NISR-WP-Phishing.pdf
Spoof Stick - Browser extension that displays the actual domains of websites as they are visited, regardless of what is shown in the browser's URL address bar. - http://www.spoofstick.com
Payments News - News stories about phishing. - http://www.paymentsnews.com/phishing/
First Monday - The Economy of Phishing - Peer-reviewed paper presents findings from the author's research to uncover phishing networks and an analysis of the phishing infrastructure. - http://www.firstmonday.org/issues/issue10_9/abad/
Content Verification - Company offers digital certificates to authenticate websites. Site provides technical information about phishing techniques. - http://www.contentverification.com
Green Armor Solutions - Sells Identity Cues software to help users recognize fake websites through visual reminders linked to user login details. - http://www.greenarmor.com/
Anti-phishing.info - Tips and information to help detect and avoid phishing attacks. - http://www.anti-phishing.info
Trusted Electronic Communications Forum - A global, cross-industry consortium fighting phishing and spoofing attacks that lead to identity theft and brand distrust. - http://www.tecf.org/
Sharecube White Papers - Describes problems with current proposed and actual antiphishing solutions and proposes specific steps to stop phishing now. - http://www.sharecube.com/whitepapers.html
Wikipedia: Phishing - Explains some common phishing methods and dangers. - http://en.wikipedia.org/wiki/Phishing
Spoof Email Tutorial - Explains how scammers trick people into thinking they're being contacted by Ebay. - http://pages.ebay.com/education/spooftutorial/
Computerworld - Phishing - Gives some real-life examples of the scam and tips on avoiding it. - http://www.computerworld.com/securitytopics/security/story/0,10801,89096,00.html
BBB Online - Phishing - Better Business Bureau's news, alerts and examples of phishing emails. - http://www.bbbonline.org/idtheft/phishing.asp