[LINK] Phishing Servers - Apache and Linux

[Rick Welykochy]

Linkers,

I have received quite a number of phishing/pharming attempts
lately, so I decided to follow up on the actual servers being
used in the phisher's URL.

Out of about 15 samples, all URLs pointed to servers running Linux
and Apache.

Either these "phishing servers" are hosting the pharming* pages
because they have been compromised, or the servers themselves
are being cared and fed by the phishers. I would tend to guess
the former to be the case.

I wonder if Winders is being used as the phishing server, If
not, why not?

I've google for stats on these things and found nothing pertaining
to the servers themselves.

A final question: if a server is found to be hosting pharming
pages, could / should the owner of the server be found complicit
in criminal fraud?


*pharming = the fake website done up to look like the real web site


cheers
rickw




-- 
_________________________________
Rick Welykochy || Praxis Services

Natural foods can be harmful. Look at all the
people who die of natural causes.
       -- anon