[LINK] Phishing Servers - Apache and Linux

[Marghanita da Cruz]

Rick Welykochy wrote:
> Linkers,
> 
> I have received quite a number of phishing/pharming attempts
> lately, so I decided to follow up on the actual servers being
> used in the phisher's URL.
> 
> Out of about 15 samples, all URLs pointed to servers running Linux
> and Apache.
> 
> Either these "phishing servers" are hosting the pharming* pages
> because they have been compromised, or the servers themselves
> are being cared and fed by the phishers. I would tend to guess
> the former to be the case.
> 
> I wonder if Winders is being used as the phishing server, If
> not, why not?
> 
> I've google for stats on these things and found nothing pertaining
> to the servers themselves.

See
http://news.netcraft.com/


> 
> A final question: if a server is found to be hosting pharming
> pages, could / should the owner of the server be found complicit
> in criminal fraud?
> 
> 
> *pharming = the fake website done up to look like the real web site
> 
> 
> cheers
> rickw
> 
> 
> 
> 


-- 
Marghanita da Cruz
http://www.ramin.com.au
Phone: (+61)0414 869202