ROCK PHISHING
If it works, don't change it, right? Analysts have noticed a dramatic increase in the number of Rock Phishing-like phishes, made famous by the Rock Phish group notorious for executing this method of attack. These attacks use multiple proxy servers, which communicate with the victims by pushing content from "mother ships." Consequently, there is no direct interaction between the victims and the actual phishing site.
Unlike Storm Phishing attacks, these phishes are not based on fast-flux networks and don't require large botnets of proxies. However a single proxy server can wreak all kinds of havoc, directing victims to attacks against multiple institutions. A recent RSA fraud report stated that researchers had traced one proxy server which was used to initiate phishing attacks against six different U.S. financial institutions.
"With multiple proxies, (the attack is) essentially masking users from the mother ship," said Marc Gaffan, director of product marketing, identity and access assurance group for RSA. "That's really state of the art today."