Resources
The following links provide valuable information from tips & techniques on combating
phishing to organizations commited to fighting it.
FTC: How Not to Get Hooked by a 'Phishing' Scam
According to the Federal Trade Commission (FTC), phishers send
an email or pop-up message that claims to be from a business or organization that you
deal with – for example, your Internet service provider (ISP), bank, online payment
service, or even a government agency. The message usually says that you need to “update”
or “validate” your account information. It might threaten some dire consequence if you
don’t respond. The message directs you to a Web site that looks just like a legitimate
organization’s site, but it isn’t. The purpose of the bogus site? To trick you into
divulging your personal information so the operators can steal your identity and run
up bills or commit crimes in your name.
FBI: Internet Fraud Complaint Center
The Internet Fraud Complaint Center (IFCC) is a partnership between the Federal Bureau of Investigation (FBI) and the National White Collar Crime Center (NW3C).
IFCC's mission is to address fraud committed over the Internet. For victims of Internet fraud, IFCC provides a convenient and easy-to-use reporting mechanism that alerts authorities of a suspected criminal or civil violation. For law enforcement and regulatory agencies at all levels, IFCC offers a central repository for complaints related to Internet fraud, works to quantify fraud patterns, and provides timely statistical data of current fraud trends.
The Anti Phishing Working Group
(APWG)
Mission: Share information and best practices. Identify the size and cost of the
phishing problem. Promote visibility and adoption of industry solutions.
The Email Service
Provider Coalition (ESPC)
In 2002, the Email Service Provider Coalition (ESPC) was formed to fight spam while
protecting the delivery of legitimate email. The organization is comprised of nearly
50 members including aQuantive, Blue Dolphin Group, Digital Impact, DoubleClick,
Experian, GotMarketing, IMN, ProspectivDirect, Roving Software, SKYLIST and Virtumundo.
The ESPC's flagship initiative, Project Lumos, is an industry proposal for a registry-based
solution to the spam problem.
InfraGard Atlanta
InfraGard is a partnership between the FBI and the private sector -- an association
of businesses, academic institutions, state and local law enforcement agencies and
other participants dedicated to sharing information and intelligence to prevent
hostile acts against the United States. It is our goal to provide a public-private
partnership and platform for the confidential exchange of Internet and information
systems related security information among members to enable business and infrastructure
protection.
Messaging Anti Abuse Working Group (MAAWG)
The purpose of the Messaging Anti Abuse Working Group (MAAWG) is to bring the messaging
industry together to work collaboratively and successfully address forms of messaging
abuse such as messaging spam, virus attacks, denial-of-service attacks and other
forms of abuse. To accomplish this, MAAWG is developing initiatives in the three
areas needed to resolve the messaging abuse problem: collaboration, technology and
public policy.
The Open Group
The Open Group is an international vendor and technology-neutral consortium that
is committed to delivering greater business efficiency by bringing together buyers
and suppliers of information technology to lower the time, cost and risk associated
with integrating new technology across the enterprise. With its proven certification
methodology and conformance testing expertise, The Open Group is an international
facilitator in delivering the interoperability that single organizations require
to help ensure independence.
The SpamCon Foundation
Unsolicited email forces unwanted and objectionable materials into our mailboxes,
impairs our ability to communicate freely and costs Internet users billions of dollars
annually. The SpamCon Foundation protects email as a viable communication and commerce
medium by supporting measures to reduce the amount of unsolicited email that crosses
private networks, while ensuring that valid email reaches its destination.
TRUSTe®
TRUSTe® is an independent, nonprofit organization dedicated to enabling individuals
and organizations to establish trusting relationships based on respect for personal
identity and information in the evolving networked world. The TRUSTe privacy program
-- based on a branded online seal, the TRUSTe "trustmark" -- bridges the gap between
users' concerns over privacy and Web sites' needs for self-regulated information
disclosure standards.
The Trusted Electronic Communications
Forum (TECF)
The Trusted Electronic Communications Forum (TECF) is a cross-industry, cross-geographic
consortium dedicated to the standardization of technologies, techniques and best
practices in the fight against phishing, spoofing and identity theft. The focus
of the TECF is to efficiently and effectively create, deploy and endorse solutions
to problems presented by research studies, analysts and by its members. Working
groups and committees are sponsored to formulate and/or validate techniques and
tools that specificatlly address high-risk threats outlined by the TECF.
|
