CAUCE

Phishing Landscape 2020: A Study of the Scope and Distribution of Phishing

 

Greg Aaron, Lyman Chapin, Dr. Colin Strutt and CAUCE Board Member David Piscitello, all of the Interisle Consulting Group, today announced the publication of the seminal report Phishing Landscape 2020: A Study of the Scope and Distribution of Phishing.

The report can be found at http://www.interisle.net/PhishingLandscape2020.html

The goal of the research was to capture and analyze a large set of information about phishing attacks, to better understand how much phishing is taking place and where it is taking place, and to see if the data suggests better ways to fight phishing. The group studied where phishers are getting the resources they need to perpetrate their crimes — where they obtain domain names, and what web hosting is used. This analysis helps identify where additional phishing detection and mitigation efforts are best deployed at vulnerable providers the research helped identify.

To assemble a deep and reliable set of data, the researchers collected URLs, domain names, IP addresses, and other data about phishing attacks from four widely used and respected threat data providers: the Anti-Phishing Working Group (APWG), OpenPhish, PhishTank, and The Spamhaus Project. (The authors wish to express their appreciation of the cooperation extended to them by these providers).

Over a three-month collection period, they learned about more than 100,000 newly discovered phishing sites.

These are the major findings and conclusions are based on the data collected:

1. Most phishing is concentrated at small numbers of domain registrars, domain registries, and hosting providers.
2. Phishers themselves register more than half of the domain names on which phishing occurs.
3. Domain name registrars and registry operators can prevent and mitigate large amounts of phishing by finding and suspending maliciously registered domains.
4. Registries, registrars, and hosting providers should focus on both mitigation and prevention.
5. The problem of phishing is bigger than is reported, and the exact size of the problem is unknown.
6. Sixty-five percent of maliciously registered domain names are used for phishing within five days of registration.
7. New top-level domains introduced since 2014 account for 9% of all registered domain names, but 18% of the domain names used for phishing.
8. About 9% of phishing occurs at a small set of providers that offer subdomain services.

Characterizing Robocalls through Audio and Metadata Analysis

CAUCE mainly focuses on abusive messaging, but our board has a wide and diverse background in anti-abuse efforts.

 

Recently we came across this presentation on abusive robocalls dealing with an increase in Robocalling, trends in abusive calls, who is calling and who is being targeted. This study took place in 2019 and lasted most of the year. 

Authors:
Sathvik Prasad, Elijah Bouma-Sims, Athishay Kiran Mylappan, and Bradley Reaves, North Carolina State University

Source: https://www.usenix.org/conference/usenixsecurity20/presentation/prasad

CRTC UNDERTAKING NOTESOLUTION INC. (ONECLASS)

On September 30, 2020 the Canadian Radio-television and Telecommunications Commission (CRTC) announced a new undertaking under Canada’s Anti-Spam Legislation (CASL) with Notesolution Inc. (OneClass) that alleges multiple violations of the anti-spam Act.

The undertaking reads that OneClass voluntarily entered the undertaking for the following alleged violations of paragraphs 6(1)(a), 8(1)(a), 10(1)(a), 10(3), 10(4), and 10(5)(a) of the Act as well as sections 4 and 5 of the Electronic Commerce Protection Regulations (CRTC) SOR/2012-36 (the Regulations (CRTC)). These alleged infractions took place between October 2016 and March 2020.

The results of the undertaking between the CRTC show that OneClass has agreed to pay $100,000 in penalties, bring their software and marketing efforts into alignment with the Act and implement a compliance program.

The CRTC has also updated their guidance for installing a computer program on their information pages, Canada’s Anti-Spam Legislation Requirements for Installing Computer Programs.

CAUCE Applauds the work of the CRTC in taking action to protect consumers and provide guidance for business that may be building or considering building applications similar to those described in the undertaking. 

For more information read CAUCE Board members blog post about this on EmailKarma.