Half of Phishing Sites in the Wild Have SSL Certificates and Show Padlock Security Icon, Study Finds

Home / News

Half of Phishing Sites in the Wild Have SSL Certificates and Show Padlock Security Icon, Study Finds

By CircleID Reporter
November 27, 2018, 5:58 pm PST Views: 12,224 Add Comment

A new study by anti-phishing company PhishLabs reveals 49 percent of all phishing sites in the third quarter of 2018 had Secure Sockets Layer or SSL with HTTPS in their URL. “That’s up from 25 percent just one year ago, and from 35 percent in the second quarter of 2018,” Brian Krebs reports in Krebs on Security. He writes: “This alarming shift is notable because a majority of Internet users have taken the age-old ‘look for the lock’ advice to heart, and still associate the lock icon with legitimate sites. ... The major Web browser makers work with a number of security organizations to index and block new phishing sites, often serving bright red warning pages that flag the page of a phishing scam and seek to discourage people from visiting the sites. But not all phishing scams get flagged so quickly.”

By CircleID Reporter

CircleID’s internal staff reporting on news tips and developing stories. Do you have information the professional Internet community should be aware of? Contact us.

Visit Page

Filed Under

Comments

The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

VINTON CERF
Co-designer of the TCP/IP Protocols & the Architecture of the Internet