After a brief introduction and background, we will review the actual techniques and tools used by phishers, providing three examples of empirical research where real-world phishing attacks were captured using honeynets. These incidents will be described in detail and include system intrusion, phishing web site preparation, message propagation and data collection.

This white paper includes extensive amounts of supporting information, with many hyperlinks to more detailed data on specific attacks available inline.

By the Honeynet Project & Research Alliance at Honeynet.org

[ Read more ]