Hurry, Get 'Em While They're Hot!

Here's yet another rude awakening regarding phishing and how bad things are really getting. According to this story on the Wall Street and Technology site, "analysts in the 24x7 Anti-Fraud Command Center operated by RSA discovered what they are calling the Universal Man-in-the-Middle Phishing Kit being sold in online forums."

Here's the kicker:

"Using the kit, fraudsters can easily create a fraudulent URL that communicates with the legitimate Web presence of the targeted organization, be it a financial institution or otherwise. In doing so, when victims clicks on the URL provided in the phishing e-mail, they then interact with the legitimate Web site via the fraudulent URL."

As Gerry Gebel pointed out in an internal email, this attack isn't new. What does seem to be new is the availability of a ready-made kit that will, at least in theory, allow a much larger swath of criminals to launch the attack.