eSecurity Planet: A report from the Anti-Phishing Working Group, a consortium of Web retailing, software, security and financial firms, blames a single gang for two thirds of phishing attacks in 2009. The "Avalanche" gang set up more than 84,000 fake Web sites designed to steal users' login credentials, credit card numbers and other personal information.
"Avalanche's impact was unprecedented," said report co-author Greg Aaron. "The losses by banks and individual Internet users were staggering."
Another co-author, Rod Rasmussen, pointed out an upside to the dominance by the Avalanche gang. "The data shows that the anti-phishing community -- including the target institutions, security responders, and domain name registries and registrars -- got very good at identifying and shutting down Avalanche's attacks on a day-to-day basis," he said. "Further, a coordinated action against Avalanche's infrastructure in November has led to an ongoing, significant reduction in attacks through April 2010."