IT Security and Disaster

Phishing attacks use both social engineering and technical subterfuge to steal consumers' personal identity data and financial account credentials. Social-engineering schemes use 'spoofed' e-mails to lead consumers to counterfeit websites designed to trick recipients into divulging financial data such as credit card numbers, account usernames, passwords and social security numbers. Hijacking brand names of banks, e-retailers and credit card companies, phishers often convince recipients to respond. Technical subterfuge schemes plant crimeware onto PCs to steal credentials directly, often using Trojan keylogger spyware. Pharming crimeware misdirects users to fraudulent sites or proxy servers, typically through DNS hijacking or poisoning.:

The Anti-Phishing Work Group (APWG)

** The Anti-Phishing Working Group is a volunteer organization. Due to the significant increase in phishing volumes and reports, there may be some delay in processing your phishing reports and membership requests. **

We are building a repository of phishing scam emails and websites to help people identify and avoid being scammed in the future. If you have received a phishing email and would like to submit it to Anti-Phishing Working Group, please send it to reportphishing@antiphishing.org. We will review the message and any websites to which it links, and post it to the Phishing Archive on this site.

Instructions for Submitting Phishing Email

In Outlook, follow these simple instructions:

Create a new mail to reportphishing@antiphishing.org.
Drag and drop the phishing email from your inbox onto this new email message
- In Netscape drop it on the 'attachment' area
Do not use "forward" if you can help it, as this approach loses information and requires more manual processing. The exception is when you use the Web interface to outlook: in that case forward is the only solution.

More Information on Phishing

http://antiphishing.org/index.html

Emergency Information | Site Policies