7

Our real web site is www.abc.com. Recently Intel notified us of another web site www.fake.com having some parts of the site appearing the same as our real site. This is obviously a phishing site.

Not much damage has been done and I don't think our users are stupid enough to recognize www.fake.com as our real site and try to access it. However, I would like to know what are the mitigation measures we could take.

I reckon sending our users an email or a company circular to warn them that we have only one real site is a must. What else can we do to prevent?

  • 2
    This is more a legal issue than a security one. The best way to prevent the phishing of login credentials is by using U2F – Neil McGuigan Dec 18 '15 at 0:50
  • Blocking the fake domain and its IP address on the corporate proxy/network would be a start, and for a legal solution I guess you could claim copyright infringement since the fake site copies your real one. – André Borie Dec 18 '15 at 1:29
  • 5
    contact the hosting company and report the site – schroeder Dec 18 '15 at 2:42
  • @NeilMcGuigan - Do you feel that any 2FA would be sufficient or that U2F provides better security than other 2FA solutions? – Neil Smithline Dec 18 '15 at 4:01
  • 3
    Thanks for the info @NeilMcGuigan. U2F does seem better at preventing phishing than other 2FA. I found this helpful too developers.yubico.com/U2F/Protocol_details/Overview.html – Neil Smithline Dec 18 '15 at 5:46
1

I know that RSA offers services that will, among other things, take down phishing sites. More information can be found here.

I have experience with them and I must say, whenever we request a take down on a phishing site, their response is quite fast.

Unfortunately, I have no idea regarding costs etc.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.