BleepingComputer.com: New Phishing Explolits Emerge

The Anti-Phishing Working Group (APWG)...released its latest phishing trends report, which shows that the number of different "brands"... reporting phishing attacks jumped from 97 in April to 137 in May: the most since December, when it was at 121...While phishing is spreading...many observers are more worried about the improved quality of attacks than about their quantity. Experts who track the phishing scene say they are seeing a new wave of exploits that go far beyond the old Website-hijacking scams. Keyloggers are among the most sophisticated and fastest-growing types of phishing attacks on the Web...The keylogger's goal: Infect user machines and, ultimately, steal their data and privileges. "There's a shift in using malicious code and exploits to infect users instead of Websites with a simply deceptive tactic...At the same time, phishing toolkits are getting easier to obtain...