Cybercrooks have developed new techniques in response to increasingly aggressive moves to identify and shut down known phishing sites. In a move designed to ensure potential phishing victims always link to a live website, fraudsters have developed so-called "smart redirection" attacks.

Emails that form the basis of phishing attacks pose as security messages from online banks in an attempt to dupe a tiny proportion of recipients who happen to be customers of the bank, into visiting a bogus site and handing over account information.

The attack was discovered by researchers at the RSA Cyota Anti-Fraud Command Centre. So far two attacks on two different banks, one based in the UK and the other in Canada, have been detected.

RSA Cyota senior product manager Andrew Moloney said: "As anti-phishing vendors become more adept at shutting down phishing websites, inevitably the fraudsters are looking at ways to minimise the effect this has on their hit rates. Analysing which websites are still live - and seamlessly redirecting users to them - seems like a good way to raise the stakes. These phishing emails look no different to any other: all the action takes place behind the scenes, so as always users need to remain vigilant."

According to the Anti-Phishing Working Group, almost 50,000 phishing websites were created last year, with more than 7,000 appearing in December alone. ®

Related stories

• Crooks debut 'plug and play' phishing kit (10 July 2007)
• Man-in-the-Middle phishing kit netted (12 January 2007)
• Interview Phishing with Rachna Dhamija (21 June 2006)
• Comment Why phishing catches punters (7 June 2006)
• 'Smart' phishing attack targets BoI (2 May 2006)
• Infosec Phishing goes international (26 April 2006)
• Why phishing reels punters in (31 March 2006)
• Trojan intercepts bank tokens (24 March 2006)
• MS lawsuits aim to reel in phishers (20 March 2006)
• Phishing fraudsters offer cash reward (14 March 2006)
• Zombie PCs menace mankind (7 March 2006)
• AOL sues mystery phishers for $18m (1 March 2006)
• Active cookies aim to thwart cyber-crooks (21 February 2006)
• Phishing fraudsters target Apple (17 January 2006)
• Spear phishers target eBay (5 January 2006)
• Phishing with Google Desktop (3 December 2005)