Good Article on Phishing

Crystal Ferraro recently posted this article on Searchsecurity.com about recent Phishing targets. It was originally a white paper she presented at the RSA conference last month, and posted this excerpt on 3/17. I have a short quote in the article, which is intended to convey the extent to which phishers are getting more sophisticated and efficient.

Ed Skoudis does a great job of explaining some of the latest trends: "[Attackers are] getting better at making the keystroke loggers difficult to find," Skoudis said. Some are embedded with rootkits, or they attack antivirus and antispyware tools. Some spyware and other malcode purposely try to foil their own analysis to buy time..."

I have more on keyloggers here and here...