Re: How to detect phishing and spoofed websites

[swierckxlists <swierckxlists () gmail com>]

Hi Brian,

Part of the research/finding out if this is happening to you or your 
company can be automated using the URLCrazy tool 
(http://www.morningstarsecurity.com/research/urlcrazy), the tool has 
been reviewed / described in this blog post: 
http://www.ihackforfun.eu/index.php?title=urlcrazy-is-someone-spying-on

Strider is a similar tool by Microsoft but URLCrazy is open source and 
can be adapted to your needs if further automation is needed.

Greets

Steven

On 12/12/2012 15:43, Brian Erdelyi wrote:
> Good morning everyone,
>
> I'd like to create a guide and checklist for detecting phishing attacks.  I want to focus on server side.  What can a 
> website admin do to detect phishing attacks and spoofed websites?  What can a web app developer do to make it easier to 
> detect phishing attacks and spoofed websites?
>
> Brian
>
> Sent from my iPhone
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com