Every second phishing attack aims to steal your money

In 2016 Kaspersky Lab’s anti-phishing technologies detected almost 155 million user attempts to visit different kinds of phishing pages

Almost half of all phishing attacks (fraudulent email messages or copycat websites that appear legitimate) registered in 2016 by Kaspersky Lab’s heuristic detection technologies were aimed at stealing their victim’s money, according to an analysis of the financial threat landscape by Kaspersky Lab the company’s experts. Compared to 2015, the amount of financial phishing attacks increased 13.14 percentage points in 2016 to comprise 47.48 per cent of all registered phishing attacks, blocked by heuristic detection technologies.

In 2016 Kaspersky Lab’s antiphishing technologies detected almost 155 million user attempts to visit different kinds of phishing pages. Of those, almost half of heuristic detections were attempts to visit a financial phishing page. Of those, more than 73.5 million almost half - were the result of financial phishing attacks, i.e. where the aim was to obtain valuable personal information from users - such as their account numbers for banking, credit accounts, social security numbers, and the login and passwords they use to access online banking. The cyber criminals intended to use this information to steal money from their victims. This is the highest share of financial phishing registered to date by Kaspersky Lab.

Banking phishing schemes are the absolute leaders among all types of financial phishing. Every fourth (25.76 per cent) attack used fake online banking information, or other content related to banks - a result that is 8.31 percentage points up on 2015. The share of phishing related to payment systems and e-shops accounted for 11.55 per cent and 10.14 per cent respectively, an increase of 3.75 p.p. and 1.09 p.p. compared to 2015.

The share of financial phishing detected on MacOS computers was 31.38 per cent. Financial phishers are particularly keen to use data related to top multinational banks, popular payment systems and Internet shops and auctions from the US, China and Brazil in their scams. The list of brands used stays the same from year to year, as their popularity remains high and they are therefore a lucrative target for cyber criminals.

In order to protect themselves from phishing, Kaspersky Lab experts advise users to take the following measures:

When paying online always check the legitimacy of the website. The connection should be protected with Https, and the domain should belong to the same organization that you’re going to pay.

Always check the legitimacy of emails that you’re receiving from famous brands. Even if it urges you to do something urgently, like change your password etc. First, make sure that it was sent by a legitimate party - contact your bank or payment system representative to find out if the email really has been sent by them to you.

Don’t click the links in emails or web-pages if you have doubts about their legitimacy;

Use a proven security solution with behaviour-based antiphishing technologies. This will make it possible to identify even the most recent phishing scams which haven’t yet been added to anti-phishing databases.

Banking phishing schemes are absoluteleaders among all types of financial phishing

Cyber criminals intend to use to this information to steal money from victims