Customers have reported an increase in Pfishing sites that are designed to look like the real site, usually a store. They are trying to do two things, steal your credentials for a logging into the real store and when you order, stealing your credit card info.

 

Here are some good ways to report such Pfishing sites per Pfishing.org

The best course of action is to report your concerns to an organization that will investigate further. There are several places to do so: 

  1. One is the U.S. government-operated website https://www.cisa.gov/uscert/report-phishing. It provides information on where to send a copy of the email or the URL to the website so that they may be examined by experts. It also includes links with details on phishing scams and how to recognize them and protect yourself.
  2. Another website to report cybercrimes is the Anti-Phishing Working Group (APWG) located at: http://antiphishing.org/report-phishing/. Unlike the government-owned website, antiphishing.org features a text box in which to copy and paste the contents of the suspicious email you have received, including the header as well as the body of the message. Along the sidebar of the website, there are additional links of information to learn about phishing scams.
  3. If you come across a website you believe is spoofed, or just looks like a phishing page attempting to steal user information, you can report the URL and submit comments to Google using this form: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en
  4. The FTC has an entire section of their website for filing complaints on phishing, identity theft and other scams. Get started here: https://www.ftccomplaintassistant.gov/#&panel1-1
  5. The FBI’s Internet Crime Complaint Center (IC3) accepts complaints here: https://www.ic3.gov/default.aspx. Make sure you have all the information needed before filing a complaint, they will ask for information about the victim, whether there was a financial transaction, and of course any info you have about the sender.
  6. KnowBe4’s Phish Alert button https://www.knowbe4.com/free-phish-alert gives your users a safe way to forward email threats to your internal security team for analysis and deletes the email from the user’s inbox to prevent future exposure, all with a single click!

You can also report to ESET here

Why we like ESET
We are an ESET partner and still feel they are one of the best device level anti-malware providers (as opposed to edge “network” firewalls). ESET provides a application solid firewall in most of their products. It is excellent and we strongly advice IT staff for our customers learn how to effectively implement it. One of the benefits of this firewall is that it can stop the rampant “phoning home” (read tracking) of many applications that disrespect privacy including at the top of the list Windows 10 and Windows 11. It also is excellent at blocking access to malware laden sites.