Spy-phishing

From Wikipedia, the free encyclopedia

Term coined by Trend Micro, presented to the Virus Bulletin conference in Montreal in 2006. Defined as "crime ware" (basically a threat that results in fraudulent financial gains), spy-phishing capitalizes on the trend of "blended threats", it borrows techniques from both phishing and spyware. the downloaded applications sit silently on the user's system until the targeted URL is visited wherein it activates, sending information to the malicious third party. Through the use of spyware and other Trojans, spy-phishing attempts to prolong the initial phishing attacks beyond the point at which the phishing site is available.