markmonitor.com

Phish Hosted for Free

Thursday, June 24th, 2010

Since March 2010, and especially this month, the MarkMonitor Security Operations Center (SOC) has noticed a significant increase in the use of free web hosting services for phishing and malware attacks.  Cybercriminals are using free hosting services to either host the phishing and malware sites themselves or redirect to fast-flux ...

New Monthly Fraud Intelligence Report Now Available

Monday, June 21st, 2010

Beginning this month, MarkMonitor will be sharing a new, monthly Fraud Intelligence Report with customers and other interested parties in our blog. The goal of the report is to provide timely analysis of developing trends and new threats in the fraud landscape. The Fraud Intelligence Report will complement the current ...

DNS…Wait a SEC

Wednesday, April 14th, 2010

DNSSEC (Domain Name System Security Extensions) is a set of specifications designed to prevent hackers from intercepting DNS queries and redirecting end users to spoofed sites through a technique known as Cache Poisoning. Complete DNSSEC implementation requires that domains are authenticated at the root by the Registry, and that DNS ...

It Is There for a Reason, So Why Not Use It?

Wednesday, February 17th, 2010

It seems like every week, news of yet another high-profile domain hijacking occurs. Whether it’s stolen credentials, SQL injection attacks, or even the work of disgruntled employees, the number of incidents has been on the rise.  At the beginning of last year, MarkMonitor participated in VeriSign’s beta program to test server-level ...

A Great Combination: Vigilance and Education

Friday, May 1st, 2009

  Most major brands suffer some type of online attacks but few use those attacks as opportunities to educate their customers.   This week, our customer Facebook experienced a high-profile phishing attack. Coincidentally, the attack just barely preceded our announcement that Facebook was expanding their relationship with MarkMonitor.   Facebook made the proverbial lemonade ...

Domain Name Registries Must Do More to Protect Highly-Trafficked Domains

Friday, April 24th, 2009

With the recent attacks against high-profile New Zealand domain names including Coca-Cola.co.nz and F-Secure.co.nz, fingers are naturally pointing to Domainz, the registrar of record for these domains, as the party responsible for this lapse in security. While domain name registrars certainly need to ensure the security and stability of their ...

No Such Thing as Free Phish

Tuesday, July 29th, 2008

One of the things that MarkMonitor does in an effort to improve our services is track the latest tactics of the bad guys whether it be phishers, domain squatters, or any other brand-abuser. In the world of phishing especially, the fraudsters are always evolving. At this weeks’ Usenix WOOT conference, Marco ...