APWG Publishes Advisory Offering Remedies for Website Hacking by Phishers

APWG industrial advisory offers valuable reference guide for webmasters whose sites have been compromised to host a phishing site

CAMBRIDGE, Mass. & LOS ALTOS, Calif.--(BUSINESS WIRE)--The APWG, the global independent coalition combating electronic crime, today announced the availability of comprehensive reference guide that helps webmasters as well as website owners and operators who suspect or discover that their web site is being used to host a phishing site.

The APWG industrial advisory, “What To Do If Your Web Site Has Been Hacked by Phishers,” was developed and authored by Dave Piscitello of ICANN and Suzy Clarke of ASB Bank in New Zealand. It is now available now at no cost from the APWG at:

http://www.antiphishing.org/reports/APWG_WTD_HackedWebsite.pdf

This APWG advisory explains the most important incident response measures that can be taken to remediate website hacking by phisher in the areas of identification, notification, containment, recovery, restoration, and follow-up when an attack is suspected or confirmed.

“It can be a confusing and scary experience to be told that your website is being used to host a phish site,” said Laura Mather, managing director of operational policy for the APWG and founder of Silvertail Systems. “‘What To Do’ helps website owners understand what to look for and helps them determine next steps.”

“The APWG hopes that by hosting this document, ISPs and phish site takedown providers can point website owners to its site and be assured they are getting information from a reputable, trustworthy source,\" explained Mather.

Suzy Clarke, ASB Bank, New Zealand, noted, “The APWG advisory offers a step by step approach that every IT department can use as a foundation from which to build their own incident response and recovery plans if they find their web site has been compromised by phishers. The program of procedures and examples the APWG advisory provides can be customized to fit most situations.”

Dave Piscitello, Sr. Security Technologist at ICANN said, \"Web sites and applications are the low hanging fruit for attackers right now. In our haste to market, we often fail to secure web sites adequately. We hope you never have the opportunity to use this guide, but believe that the information we provide will help you recover from a web site attack efficiently, effectively, with an opportunity to learn from the bad encounter so you can avoid future, like attacks\".

By Admin with No comments