2008-11-01
Abstract
Anti-Phishing Working Group issues best-practices advisory for Internet registrars.
Copyright © 2008 Virus Bulletin
The Anti-Phishing Working Group (APWG) has issued a best-practices advisory for Internet registrars, setting out a series of recommendations that, if followed, should help to reduce the risk and impact of phishing.
The recommendations focus on three main areas: evidence preservation for investigative purposes, proactive fraud screening and phishing domain takedown. As registrars are in direct contact with those who register domains, they may acquire key evidence about the people who register domains for fraudulent purposes that can subsequently be used to identify and prosecute them. The document therefore encourages registrars to collect and record as much of this information as possible. The document also outlines a number of ‘lightweight’ processes that registrars can put in place to identify fraudulent activity before domain registration takes effect and recommends best practices that registrars can use to process takedown requests quickly. The document can be downloaded from http://www.antiphishing.org/reports/APWG_RegistrarBestPractices.pdf.
