Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Phishing

Internet Giants Unite in War on Phishing

Organizations Unite to Combat Email Phishing through DMARC.org

Fifteen companies, including PayPal, Google, Facebook, and Microsoft, have united to launch DMARC, a blueprint for a global counter attack on phishing, and a way to improve coordination between email providers and mail sender domain owners to combat spam.

Organizations Unite to Combat Email Phishing through DMARC.org

Fifteen companies, including PayPal, Google, Facebook, and Microsoft, have united to launch DMARC, a blueprint for a global counter attack on phishing, and a way to improve coordination between email providers and mail sender domain owners to combat spam.

DMARC, Domain-based Message Authentication, Reporting and Conformance, will be supported by DMARC.Org, a newly announced technical working group that has been developing the standards for the past 18 months.

The group says it has a draft specification that helps create a feedback loop between legitimate email senders and receivers to make it more challenging for phishers trying to send fraudulent email.

DMARC.org says that its specification addresses concerns that have traditionally deterred widespread deployment of an authenticated, trusted email ecosystem. Email receivers currently lack a reliable way to know the extent to which an email sender uses standards like SPF and DKIM for authenticating their messages. Because of this, email providers must rely on complex and imperfect measurements to distinguish legitimate unauthenticated messages from fraudulent phishing messages.

It also gives the legitimate owner of an Internet domain a way to request that illegitimate messages – spoofed spam, phishing – be put directly in the spam folder or rejected outright.

The group plans to gather data and input from field usage and then submit its DMARC specification to the The Internet Engineering Task Force (IETF) for standardization.

Advertisement. Scroll to continue reading.

“Email phishing defrauds millions of people and companies every year, resulting in a loss of consumer confidence in email and the Internet as a whole,” said Brett McDowell, Chair of DMARC.org and Senior Manager of Customer Security Initiatives at PayPal. “Industry cooperation – combined with technology and consumer education – is crucial to fight phishing.”

Written By

For more than 10 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is the Director of several leading security industry conferences around the world.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.

Register

Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.

Register

Expert Insights

Related Content

Phishing

The easiest way for a cyber-attacker to gain access to sensitive data is by compromising an end user’s identity and credentials. Things get even...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Nation-State

The North Korean APT tracked as TA444 is either moonlighting from its previous primary purpose, expanding its attack repertoire, or is being impersonated by...

Application Security

Password management firm LastPass says the hackers behind an August data breach stole a massive stash of customer data, including password vault data that...

Application Security

Microsoft on Tuesday pushed a major Windows update to address a security feature bypass already exploited in global ransomware attacks.The operating system update, released...

Phishing

The Single Most Important Part of Dealing with a Phishing Attack is Preparing for the Attack Before it Actually Happens.

Application Security

Electric car maker Tesla is using the annual Pwn2Own hacker contest to incentivize security researchers to showcase complex exploit chains that can lead to...

Cybercrime

Reddit says its systems were hacked following a sophisticated phishing attack aimed at employees.