Talk about something to be concerned about. The group/person/computer/anonymous entity called ‘Rock Phish’ is known for sending out about fifty per cent of all phishing emails on a daily basis. Knowing that fact as well as the large amount of people who are ignorant to phishing scams, could you imagine how many identities Rock Phish acquires on a daily basis? That is very scary to think about. More details on this below:

The first thing you need to know about Rock Phish is that nobody knows exactly who, or what, they are.

Wikipedia defines the Rock Phish Kit as “a popular tool designed to help nontechnical people create and carry out phishing attacks,” but according to security experts, that definition is not correct. They say that Rock Phish is actually a person, or perhaps a group of people, who are behind as much as one-half of the phishing attacks being carried out these days.

No one can say for sure where Rock Phish is based, or if the group operates out of a single country.

“They are sort of the Keyser Söze of phishing,” said Zulfikar Ramzan, senior principal researcher with Symantec’s Security Response group, referring to the secretive criminal kingpin in the 1995 film, “The Usual Suspects.”

“They’re doing some pretty scary things out there,” he added.

This criminal organization first appeared in late 2004 and was given the name “Rock Phish” because the URLs (Uniform Resource Locators) on the group’s fake sites included a distinctive subdirectory named “rock,” a technique the group abandoned once phishing filters began looking for the word.[more]

Tags: Scams, Identity Theft