Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Phishing

Internet Giants Unite in War on Phishing

Organizations Unite to Combat Email Phishing through DMARC.org

Fifteen companies, including PayPal, Google, Facebook, and Microsoft, have united to launch DMARC, a blueprint for a global counter attack on phishing, and a way to improve coordination between email providers and mail sender domain owners to combat spam.

Organizations Unite to Combat Email Phishing through DMARC.org

Fifteen companies, including PayPal, Google, Facebook, and Microsoft, have united to launch DMARC, a blueprint for a global counter attack on phishing, and a way to improve coordination between email providers and mail sender domain owners to combat spam.

DMARC, Domain-based Message Authentication, Reporting and Conformance, will be supported by DMARC.Org, a newly announced technical working group that has been developing the standards for the past 18 months.

The group says it has a draft specification that helps create a feedback loop between legitimate email senders and receivers to make it more challenging for phishers trying to send fraudulent email.

DMARC.org says that its specification addresses concerns that have traditionally deterred widespread deployment of an authenticated, trusted email ecosystem. Email receivers currently lack a reliable way to know the extent to which an email sender uses standards like SPF and DKIM for authenticating their messages. Because of this, email providers must rely on complex and imperfect measurements to distinguish legitimate unauthenticated messages from fraudulent phishing messages.

It also gives the legitimate owner of an Internet domain a way to request that illegitimate messages – spoofed spam, phishing – be put directly in the spam folder or rejected outright.

The group plans to gather data and input from field usage and then submit its DMARC specification to the The Internet Engineering Task Force (IETF) for standardization.

“Email phishing defrauds millions of people and companies every year, resulting in a loss of consumer confidence in email and the Internet as a whole,” said Brett McDowell, Chair of DMARC.org and Senior Manager of Customer Security Initiatives at PayPal. “Industry cooperation – combined with technology and consumer education – is crucial to fight phishing.”

Advertisement. Scroll to continue reading.
Written By

For more than 15 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is founder and director of several leading cybersecurity industry conferences around the world.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.

Register

Learn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.

Register

People on the Move

Raffi Joukhadarian has been named Managing Director and Chief Financial Officer at MorganFranklin Cyber.

Data security firm Rubrik has appointed Kavitha Mariappan as its Chief Transformation Officer.

DARPA veteran Dan Kaufman has joined Badge as SVP, AI and Cybersecurity.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.