IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

One criminal gang involved in half of phishing attacks

Expert says Romanian "Rock Phish" gang responsible for half of worldwide phishing attacks

Over half of phishing emails in the world are thought to come from just one criminal gang, according to a security expert.

Ken Dunham, director of the VeriSign's security research unit iDefense Rapid Response Team, said that the gang, called "Rock Phish", is "likely responsible for 50 percent or more of current phishing attacks today."

He said that the gang is working out of Romania or a nearby country. "This group has been in operation since 2004 and is responsible for innovation in both spam and phishing attacks to date, such as pioneering image-spam," said Dunham. "The group is named after URL characteristics, where strings such as "rock" or "r" may appear in a phishing URL."

Since then the group has evolved its strategy and dropped "rock" from phishing URLs in order to avoid detection from filters. Nowadays, most new browsers include some rudimentary anti-phishing technology, but the group has begun to create unique URLs in its phishing attacks in order to circumvent these filters. Dunham said that the gang has "successfully automated a highly sophisticated fraud ring involving spam and phishing for criminal gain."

The gang avoids the more popalur sites to attack, such as eBay and PayPal, instead targeting US and European banks and other financial institutions. "Estimated phishing losses from Rock Phish alone are in the millions annually. The group has reportedly attacked 44 different brands to date in at least nine different countries," said Dunham.

Jamz Yaneza, senior threat research analyst at anti-virus company Trend Micro said that computer crime has evolved into organised crime and "is no longer the game of individual attackers."

"With money as their main driver, our research has tracked how attacks have moved from being fast and large scale to being cleverly crafted to attack very specific groups under the radar," he said. "The unseen web threat is maturing, and users should be ever-more careful about what they download and install, as blended threats are ever-more cunning in their attempt to steal corporate and personal data or money."

Featured Resources

Four strategies for building a hybrid workplace that works

All indications are that the future of work is hybrid, if it's not here already

Free webinar

The digital marketer’s guide to contextual insights and trends

How to use contextual intelligence to uncover new insights and inform strategies

Free Download

Ransomware and Microsoft 365 for business

What you need to know about reducing ransomware risk

Free Download

Building a modern strategy for analytics and machine learning success

Turning into business value

Free Download

Most Popular

Windows Server admins say latest Patch Tuesday broke authentication policies
Server & storage

Windows Server admins say latest Patch Tuesday broke authentication policies

12 May 2022
Russian hackers declare war on 10 countries after failed Eurovision DDoS attack
hacking

Russian hackers declare war on 10 countries after failed Eurovision DDoS attack

16 May 2022
IT admin deletes company’s databases and is jailed for seven years
Policy & legislation

IT admin deletes company’s databases and is jailed for seven years

16 May 2022