No let-up in the growth of phishing in 2021

Weer opvallende case in het mkb, meer gehackte sites per aanval

Close-up of truck wheels and a truck driver holding clipboard

Het aantal phishingsites steeg in 2021 wereldwijd, tot nu toe, met 22% ten opzichte van een jaar eerder, dat blijkt uit een recent rapport van PhishLabs. Het aantal phishingaanvallen steeg echter veel minder sterk. Dit wijst erop dat criminelen een wijder net uitgooien op zoek naar een geschikt doelwit. Tegelijkertijd worden de methoden steeds geraffineerder en richten ze zich meer op het mkb. Een recente case uit de transportwereld laat zien hoe cybercriminelen met gespoofte mails hele vrachtladingen weten te bemachtigen.

Phishing sites up nearly a quarter

Back in 2020, the world already had a lot of phishing sites. But in the first half of 2021 the number grew even further. In May 2021, PhishLabs put the global phishing site count at more than half a million for the first time in history. Three quarters of the scams involved specially registered and built domain names and websites. The rest were based on originally innocent sites that the scammers hacked. Another striking trend to emerge is that the use of social media ads for phishing has gone up by 47 per cent. The full report is available to download here.

.nl isn't a problem domain

The .nl domain doesn't figure in the list of the main TLDs used for phishing. Until recently, though, Mali's similar-looking .ml domain was often used for scams, many aimed at Dutch targets. However, for reasons that remain unclear, such attacks have decreased significantly in recent times. Although .nl is a relatively low-abuse domain, problems do occur. In August, that point was underscored by a breaking story from the freight transport world.

The Schopman Transport case

Oldenzaal-based hauliers Schopman Transport were hit by a scam that illustrates some of the tactics used by scammers. A Bulgarian e-mail address was used to register a domain name very like the one used by Schopman. From an address at the lookalike domain, the scammers mailed Schopman's customers saying that they had a vehicle nearby with spare capacity. One customer took advantage of the offer, and handed over a large consignment of tractor tyres for shipment. But the truckers were of course not Schopman drivers, but crooks. And the tyres disappeared without trace. The incident shows how fraudsters are now targeting specific organisations -- a tactic known as 'spear phishing'. And how they like to go after firms previously unaffected by cybercrime.

Domain name monitoring and e-mail security standards important for SMEs

Combined with the continuing growth of phishing sites, the Schopman story underscores the need for SMEs to get to grips with cybersecurity. By, for example, following an active domain name policy and regularly scanning for lookalike registrations. More priority also needs to be attached to the use of e-mail security standards, such as DMARC. It's vital that SMEs recognise that any business, big or small, can be targeted by cybercriminals, and that appropriate precautions are taken.