Victims may seek to recover actual damages or $500,000 for each violation, depending upon which is greater. Phishing often involves the use of names of legitimate banks, retailers and financial institutions to convince recipients of bogus e-mail offers to respond.

Dani AI

Generated

The news item posted sparked the right conversation: legal tools help, but they are only one piece of the response. is correct that cross-border enforcement is hard; for most site owners the fastest wins come from technical cleanup, containment and working with the hosting provider. 's enthusiasm is understandable, but practical steps matter more than headlines.

If a site is repeatedly sending phishing messages (as reported by ), assume a compromise and take these actions immediately: preserve evidence (do not wipe logs), suspend public writes or put the site in maintenance mode, change all hosting/FTP/SSH/database/email passwords, and ask the host to temporarily block outbound SMTP until cleaned. Use file scans and targeted searches to find web backdoors and cron jobs; examples:

# find recently changed files
find /home/username/public_html -type f -mtime -30 -ls

# look for common PHP backdoor patterns
grep -R --line-number -E "base64_decode|gzinflate|eval\\(|preg_replace\\(.*e\\)" /home/username/public_html

# run malware tools if available
maldet -a /home/username/public_html
clamscan -r /home/username/public_html

After cleanup, harden and prevent: update CMS/plugins/themes, remove unused scripts, enforce least-privilege file permissions, enable file-integrity monitoring, and configure SPF/DKIM/DMARC to limit spoofing. Report incidents to the hosting provider and to consumer/federal reporting channels (for U.S. incidents see IC3 and FTC Report Fraud). If unsure or if the compromise recurs, engage a specialist — persistent reinfection often means an overlooked backdoor or compromised account.

Recommended Answers

All 3 Replies

It's about time. But it would be nice if they had some way to get to the phishers that set up shop overseas.

w00t

One of my sites on the web gets a phishing bank worm in the email inbox about 1 per week. I religiously keep deleting this worm and it comes back in about a weeks worth of time. Any advice on what to do?

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.