Sponsor Solutions

Prevent cousin domains

Allure Security
http://www.alluresecurity.com
Allure Security protects customer information from cybercriminals. Our patented approach protects an organization’s brand and provides security for their customers. Allure Security anti-phishing solution was created by Columbia University Professor and cybersecurity researcher Salvatore Stolfo, Ph.D.

Allure Security’s mission is to improve early detection of website spoofing as part of an orchestrated phishing attack, protecting customers from fraud and preserving the enterprise’s brand reputation. Using its patented, award-winning beacon and deception technologies, Allure Security’s SaaS platform empowers enterprise security teams to detect and fight back against web spoofing in real-time. Organizations can proactively protect customer data and preserve brand reputation using a modern, easy-to-deploy solution. Allure Security is a Glasswing Ventures portfolio company. For more information, visit: www.alluresecurity.com

VeriSign
http://www.verisign.com
Tel: +1 650 426 5112 or +1 866 893 6565
VeriSign, Inc. is the world’s leading SSL Certificate Authority, securing nearly 500,000 Web servers. Its customers include 93 percent of the Fortune 500, the top U.S. banks, and 47 of the 50 largest e-commerce sites. The rigorous VeriSign authentication and security practices over the last ten years have helped establish the VeriSign Secured Seal as the #1 mark of trust on the Internet.
VeriSign Security Serivices

Cofense, Inc.
https://www.cofense.com
Tel: 703-652-0717
Ninety-one percent (91%) of cyber attacks start with spear phishing. A single phish can result in numerous high-profile breaches that typically take hundreds of days to detect. The Cofense® solution disrupts the core of the adversary’s attack chain – their targets and their tactics. The powerful combination of Simulator™-Reporter™-Triage™- and Cofense Intelligence reduces the success and resolution time of phishing attacks. It also provides an additional safety net by operationalizing a program of human security sensors with a detection mechanism based on user-generated intelligence derived in near real-time. Cofense’s phishing threat management solution prepares employees to be more resilient and vigilant against targeted cyber attacks and empowers them to easily report suspicious emails for timely incident response. Security teams can effectively prioritize, analyze, and act on suspect email reports detected by users, producing actionable intelligence that is integrated with and employed by an organization’s existing security infrastructure and analytics capabilities.

MarkMonitor
http://www.markmonitor.com
Tel: +1 800 745 9229
MarkMonitor, the world leader in enterprise brand protection and a Thomson Reuters Intellectual Property & Science business, uses a SaaS delivery model to provide advanced technology and expertise that protects the revenues and reputations of the world’s leading brands. In the digital world, brands face new risks due to the web’s anonymity, global reach and shifting consumption patterns for digital content, goods and services. Customers choose MarkMonitor for its unique combination of industry-leading expertise, advanced technology and extensive industry relationships to preserve their marketing investments, revenues and customer trust. Learn more at www.markmonitor.com.

Bolster
https://www.bolster.ai
Bolster prevents account takeovers and other forms of online fraud. Bolster uses an industry-leading AI engine for highly accurate zero day phishing detection and takedown. This engine detects more phishing sites and automatically takes them down faster than other solutions in the market today. Bolster also provides a real-time phishing detection API for its customers to fight phishing where it occurs – email (sender and recipient), messaging, link sharing, and document sharing,
Request a demo at https://www.bolster.ai

Netcraft
http://www.netcraft.com
Tel: +44 (0)1225 587500
Netcraft has developed a service for companies to track occurrences of their names, brands, trademarks and slogans on the Internet. The service identifies sites which may be trying to perpetuate fraud, conduct phishing attacks, attempt identity theft by impersonation, or are fraudulently implying a non-existent relationship with the company.
Netcraft Brand Protection

RiskIQ
www.riskiq.com
RiskIQ is the leader in digital threat management, providing the most comprehensive discovery, intelligence, and mitigation of threats associated with an organization’s digital presence. With more than 80 percent of attacks originating outside the firewall, RiskIQ allows enterprises to gain unified insight and control over web, social, and mobile exposures. Trusted by thousands of security analysts, RiskIQ’s platform combines advanced internet data reconnaissance and analytics to expedite investigations, understand attack surfaces, assess risk, and take action to protect business, brand, and customers. Based in San Francisco, the company is backed by Summit Partners, Battery Ventures, Georgian Partners, and MassMutual Ventures. Visit RiskIQ.com or follow us on Twitter.

Try RiskIQ PassiveTotal for free by visiting www.riskiq.com/whats-new-passivetotal.

PhishLabs
https://www.phishlabs.com
Tel: +1.877.227.0790
As a managed services provider with more than fifteen years of experience finding and stopping threats outside the traditional network perimeter, PhishLabs is the ideal partner to help cyber security teams protect their enterprise, brands, and customers from digital risks. PhishLabs Managed Threat Intelligence and Mitigation services make it easier than ever to manage external and internal risks across email, domain, social media, mobile, dark, deep, and open web vectors. Our expert-driven, managed approach goes beyond do-it-yourself product and SaaS tools to ensure the digital risk protection outcomes enterprises want.

FraudWatch International
http://www.fraudwatchinternational.com
Tel: US +1-415-449-8800 or AU: +61-3-9887-6777
FraudWatch International is a specialist Anti-Phishing company, providing a comprehensive Anti-Phishing service; protecting organizations around the world against: Phishing, Pharming, Vishing and Trojan attacks. FraudWatch maintains two 24×7 Security Operations Centers in North America and Australia, with analysts working exclusively on Anti-Phishing. FraudWatch clients receive outstanding customer service with FraudWatch’s 24×7 monitoring & detection, real-time alerting of verified threats, incident tracking & forensics portal with real-time one click reporting, threat mitigation countermeasures and fast site blocking and take down services. FraudWatch minimizes the impact of phishing attacks with a swift and decisive incident response, thereby deterring future attacks by making our clients a hard target.

Detect and analyze attacks

Cyren
https://www.cyren.com
Tel: +1 703-760-3320
Cyren’s Threat Intelligence Services for email, web, and advanced threat defense are trusted by over 200 of the world’s leading technology, network equipment, and security vendors. Cyren’s OEM security services are easy to integrate and simple to manage, offering flexible licensing and committed global support. Cyren empowers technology vendors and large-scale platform vendors with the real-time detection capabilities of our GlobalView™ threat intelligence network, backed by a dedicated technical and commercial support model. Our globally comprehensive and unique insights into current and emerging threats are provided as individual cyber intelligence services in three service suites: Email Security Suite, Web Security Suite, and Advanced Threat Defense. Key services within these suites that detect various attributes of phishing attacks include:

URL Filtering – includes categories identifying malicious URLs and zero-day phishing sites.
IP Reputation – identifies, classifies and tags malware, spam, or phishing sources in real time.
Malware Attack Detection – identifies attacks in the earliest moments of an outbreak, based on patented Recurrent Pattern Detection technology.
Phishing Intelligence – provides real-time detection and notification of new phishing threats.

DomainTools
http://www.domaintools.com
Tel: +1 206 838-9020
DomainTools is the undisputed leader in domain registration information and related DNS data. We have been collecting data on domains and IP addresses for over 12 years in order to “connect the dots” on criminals and criminal behavior, including DDOs, Phishing, Malware, and APTs. We map the internet, collecting data on current and historical data including Whois (domain registration data), IP address, hosting servers, MX records, SSL certifications, screenshots, and more, building a database and associated analytical tools which constitute the world’s largest single store of domain and threat actor profile resources.

VeriSign
http://www.verisign.com
Tel: +1 650 426 5130
Built on intelligence, experience, and a robust global infrastructure, VeriSignÂ® Managed Security Services includes 24×7 monitoring, real-time intelligence, lifecycle threat analysis, and quick response. Our unique combination of people, process, intelligence, and technology enables you to proactively manage risk, monitor compliance, and mitigate emerging security threats.

Services include Managed Firewall and VPN Service, Managed Intrusion Prevention, Managed Intrusion Detection, Managed Vulnerability Protection Service, Managed Vulnerability Alerting, Managed Incident Response and Forensics, Phishing Response, and iDefense Security Intelligence Service.
VeriSign Managed Security Services

Cyxtera Technologies
www.cyxtera.com
Tel: +1-866-524-4782 or +57 1- 2362455
Cyxtera is simplifying the way businesses deal with and effectively deploy Â– security for online transactions. We provide solutions for identifying and preventing online transaction fraud while helping institutions comply with existing US domestic and international two factor authentication requirements. Using our advanced transaction fraud prevention solutions, we help protect online businesses and enterprise applications from phishing attacks, online credential theft and Internet fraud threats.

McAfee, Inc.
http://www.mcafee.com
Tel: 1 (888) VIRUSNO
The McAfee VirusScan 8.0i product helps prevent end-user’s machines from being recruited and exploited as part of a Bot-Net by both detecting Trojan and backdoor malicious code, protecting against buffer overrun attacks and network attacks. Finally, all McAfee Antivirus products, from the desktop to the server to the gateway include the the world-class McAfee scan engine to detect and defend against key loggers and script exploits that are often used in Phishing attacks.

McAfee Entercept and McAfee Foundstone protects protect ISPs from being compromised and subsequently used to host Phishing sites by identifying weaknesses and protecting against buffer overrun type attacks.

RSA
http://www.rsa.com
TEL: North America: 1- 877 RSA 4900 and Europe: + 00 800 2299 4613
RSA® FraudAction is a proven service offering complete fraud protection against phishing, pharming and Trojan attacks – including 24×7 monitoring and detection, real-time alerts and reporting, forensics and countermeasures, and site blocking and shutdown. At the core of the FraudAction service is RSA’s exclusive Anti-Fraud Command Center, a team of elite researchers that remain on the forefront of fraud trends and the latest online threats and have shut down nearly 300,000 online attacks.

Symantec
Symantec Online Fraud Management Solution
The Symantec Online Fraud Management Solution provides enterprises a multi-pronged solution for mitigating online fraud. It protects financial institutions and their customers by blocking fraudulent emails from reaching consumers and alerting the company that its customers are under attack. At the same time, the Symantec Online Fraud Management Solution provides customer education, customer desktop security assessment, and customer protection technologies that protect the consumer as well as the enterprise network. In addition, it provides services to share Symantec’s online fraud expertise and ensure rapid implementation.

Takedown

Try RiskIQ PassiveTotal for free by visiting www.riskiq.com/whats-new-passivetotal.

Cyxtera Technologies
www.cyxtera.comTel: +1-866-524-4782 or +57 1- 2362455
Cyxtera is simplifying the way businesses deal with and effectively deploy Â– security for online transactions. We provide solutions for identifying and preventing online transaction fraud while helping institutions comply with existing US domestic and international two factor authentication requirements. Using our advanced transaction fraud prevention solutions, we help protect online businesses and enterprise applications from phishing attacks, online credential theft and Internet fraud threats.

Netcraft
http://www.netcraft.com
Tel: +44 (0)1225 587500
Once a phishing site has been detected, Netcraft responds with a set of actions which will significantly limit access to the site immediately, and will ultimately cause the fraudulent content to be eliminated. Netcraft enjoys excellent relations with the hosting community, and many of the worldÂ’s largest hosting companies and domain registrars are Netcraft’s customers. Netcraft can exercise its existing relationships with these companies to provide a swift and smooth response to the detection of the site. If the hosting company is reputable, this may be sufficient to ensure a prompt end to the fraudulent activity. The takedown process is easy to follow for clients, who can track progress by web, electronic mail or RSS feed. The availability of the phishing site is monitored and graphed and new attacks are notified via mail, SMS and optionally SMS-to-voice.
Netcraft Phishing Site Takedown and Countermeasures

VeriSign
http://www.verisign.com
Tel: +1 650 426 5130
VeriSignÂ® Anti-Phishing Solution provides the most comprehensive security programs to minimize impacts from phishing attempts. It combines prevention, detection, and fast response via a customized program that meets each organization’s security needs. VeriSign offers the benefits of security research intelligence, unique threat data available only to VeriSign and its customers, and around-the-clock support from online fraud experts. VeriSign uses its extensive monitoring and scanning capabilities to search for brand infringement, traffic-diversion tactics, and unwanted brand association with objectionable content. Brand monitoring lets companies know where their logos and content are used, or products distributed, without authorization. Our Phishing Response Service leverages extensive experience in Internet fraud services as well as a global network of contacts in the legal, government, and ISP communities to identify sources of phishing attacks and quickly shut down Web sites and accounts.

With a worldwide customer base and more than 4000 network-security devices under management, VeriSign views Internet activity with width and depth to comprehensively protect customers from emerging threats.
VeriSign Anti-Phishing Solutions

End User Awareness & Training

Wombat Security Technologies
http://www.wombatsecurity.com/training-methodology
Tel: 412-621-1484
Traditional cyber security classroom training typically consists of boring videos and presentations and doesn’t provide the level of retention needed to protect your employees and your organization. To drive lasting change in employee behavior, security training must be engaging and effective. Wombat’s cloud-based training software creates “teachable moments” where users practice what they learn and get immediate feedback on the decisions that they make, thus lengthening retention and changing behavior. Security officers can choose training from a wide range of brief (less than 10-minutes long) training modules on topics such as phishing, smartphones, social networks, web browsing, and working outside of the office safely. Our interactive software training solutions can reduce your employee’s susceptibility to security attacks by over 70%!

Fraud analysis

Try RiskIQ PassiveTotal for free by visiting www.riskiq.com/whats-new-passivetotal.

Forensic services Application gateways

Try RiskIQ PassiveTotal for free by visiting www.riskiq.com/whats-new-passivetotal.

Consumer toolbars

Netcraft
http://www.netcraft.com
Tel: +44 (0)1225 587500
The Toolbar community is effectively a giant neighbourhood watch scheme, empowering the most alert and most expert members to defend everyone within the community against phishing attacks. The Netcraft Toolbar also traps suspicious URLs containing characters which have no common purpose other than to deceive, enforces display of browser navigational controls (toolbar & address bar) in all windows to defend against pop-up windows which attempt to hide the navigational controls, and clearly displays sites’ hosting location, including country, helping you to evaluate fraudulent URLs (e.g. the real citibank.com or barclays.co.uk sites are unlikely to be hosted in the former Soviet Union).
Netcraft Anti-Phishing Toolbar

SecureBrain Corporation
http://www.securebrain.co.jp (Includes English-language pages.)
Tel: +81 3 3234 3001
PhishWall is the revolutionary Anti-Phishing solution that uses a new patent-pending (PATPEND:2004-195208) “user-based” web server authentication technology based on a public key encryption algorithm. Through the PhishWall solution, corporations can offer a more secured Internet-based e-commerce environment to their customers and protect them against phishing attacks. SecureBrain PhishWall uses an established cryptographic message exchange scheme to give consumer an easy graphical way to assure he is on the proper Website for his banking, shopping and payments, applications.

I am text block. Click edit button to change this text. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

Email authentication

Email filtering

Zix Corporation
https://www.zixcorp.com/
Tel: +1 866-257-4949
Zix is a leader in email security, addressing inbound and outbound risks. Trusted by the nation’s most influential institutions in healthcare, finance and government, Zix delivers a superior experience and easy-to-use solutions for email encryption, data loss prevention, advanced threat protection, archiving and bring your own device (BYOD) security. Focusing on the protection of business communication, Zix enables its customers to better secure data and meet compliance needs. For more information, visit zixcorp.com.

Cyren
https://www.cyren.com
Tel: +1 703-760-3320
More than 1.5 billion users around the world rely on Cyren’s 100% cloud Internet security solutions to protect them against cyber attacks and data loss every day. Powered by the world’s largest security cloud delivering the industry’s fastest time to protection, Cyren protects enterprises with award-winning security-as-a-service for web, email, sandboxing, and DNS, and embedded threat intelligence solutions for security vendors and service providers.
Cyren Email Security is a cloud-based secure email gateway that filters your organization’s inbound and outbound email to protect users from cyber threats, phishing and spam. Powered by the Cyren GlobalView security cloud, Cyren Email Security delivers the fastest and most comprehensive security in the industry. And as a 100% SaaS service, it’s easy to buy, deploy and manage.

VeriSign
http://www.verisign.com
Tel: +1 650 426 5130
VeriSign® Messaging Security and Compliance Services offers a suite of solutions that secure enterprises from spam and virus attacks while providing the tools to help meet regulatory and legislative requirements to achieve messaging security and compliance. With a fully distributed network and high availability, VeriSign Messaging Security and Compliance Services delivers these capabilities today-without requiring any investment in hardware, software or storage systems.
verisign.com/…/messaging-security-and-compliance

Netcraft
http://www.netcraft.com
Tel: +44 (0)1225 587500
Netcraft launched its anti-phishing system at the start of 2005, and is now making available the list of active phishing sites validated by Netcraft as a continuously updated feed, which is already used in all the major web browsers and also licensed by many of the leading anti-virus, content filtering, web-hosting and domain registration companies. The Netcraft Toolbar, which makes use of the feed, has been assessed as the most effective anti-phishing service in a number of third-party tests.
Netcraft Phishing Site Feed

Wombat Security Technologies
http://www.wombatsecurity.com/phishpatrol
412-621-1484
Wombat’s PhishPatrol® is a purpose-built anti-phishing email filter that enhances your organization’s email security by catching significantly more phishing emails than leading anti-spam/anti-virus software. The predictive technology within PhishPatrol utilizes a multi-layered architecture where each layer analyzes emails based upon collections of contextual attributes that are commonly found in phishing attacks. PhishPatrol will allow you to catch the majority of phishing emails missed by anti-spam and anti-virus filters, Identify zero hour attacks with Wombat’s cutting-edge predictive technology, and limit employee exposure to all phishing attacks, even spear phish. Wombat offers multiple deployment options to fit your unique needs. You can deploy the solution as a virtual appliance or anti-spam plugin.

McAfee, Inc.
http://www.mcafee.com
1-(888) VIRUSNO
McAfee SpamKiller® includes specific rules that help to identify phishing attacks by looking for certain phishing specific characteristics that can be present in e-mail. Once triggered, these rules are automatically assigned an overall spam rating by SpamKiller, which results, in most cases, with the messages being blocked. Together with the Anti-Phishing Working Group (APWG), McAfee has compiled a thorough database of phishing attacks and uses the knowledge from these attacks to create effective filtering rules.

Norton Internet Security 2005/
Norton Internet Security 2005 is the easiest and most complete online security and privacy suite for home users and small offices. Right out of the box, Norton Internet Security 2005 provides comprehensive protection against today’s most prevalent Internet threats, including viruses, worms, and Trojan horses as well as hackers, privacy threats, spam email, and inappropriate Internet content.

Norton AntiSpam 2005
Norton AntiSpam 2005 is a powerful yet easy-to-use solution that automatically and accurately detects and filters out unwanted e-mail at the desktop. Enhanced filtering capabilities protect users from e-mail spoofing and phishing scams as well as from sexually explicit content.

Symantec Brightmail AntiSpam 6.0
Symantec Brightmail AntiSpam 6.0 is designed to further protect enterprises from the latest spamming techniques by providing new non-English language filters and powerful administration enhancements. Symantec Brightmail AntiSpam 6.0 includes a centralized Web-based control center, consolidated logging and reporting, and global policies that can be created on a per-user or per-group basis.

Symantec Mail Security 8200 Series Appliances
Symantec Mail Security 8200 Series is designed to provide a secure e-mail gateway, helping to ensure an available e-mail infrastructure. Customers are offered the highlest level of spam and virus protection through the integration of Symantec Brightmail AntiSpam and Symantec AntiVirus technologies. Symantec Mail Security 8200 Series also integrates volume management, attack prevention, content filtering, encryption, anti-forgery and archiving functionality into a single solution.

Symantec Premium AntiSpam
Symantec Premium AntiSpam is an add-on subscription service, powered by Brightmail technology and response, that provides best-of-breed spam prevention for Symantec Mail Security and Symantec AntiVirus Enterprise Edition customers.

Web filtering

Kaspersky Lab
http://www.kaspersky.com

Kaspersky Internet Security
Kaspersky PURE
Kaspersky ONE
Delivers premium protection from viruses, Trojans, phishing, spam, hackers, and more. Its cutting-edge, hybrid approach to digital security combines innovative, cloud-based technologies with advanced antivirus protection to deliver a faster, more effective response to today’s complex, ever-evolving threats.

Kaspersky Endpoint Securityf
Uses the most modern technologies from Kaspersky Lab to protect workstations and servers on corporate networks. A database containing URLs of phishing sites is used to identify and disable links to such websites in the Internet browser, at the same time rebuffing emails from phishers in the mail program.

Netcraft
netcraft_phishing_site_feed_available
Netcraft launched an anti-phishing system at the start of 2005: people install a toolbar and effectively become part of a giant neighbourhood watch system whereby the most experienced members of the community can report phishing sites and effectively block them for the rest of the community. Netcraft is now making available the list of phishing sites reported by the Toolbar community and validated by Netcraft as a continuously updated feed suitable for ISPs, hosting companies, enterprises, and other companies that operate mail servers and web proxies, or network monitoring systems.
Netcraft Phishing Site Feed

Cyren
https://www.cyren.com
Tel: +1 703-760-3320
More than 1.5 billion users around the world rely on Cyren’s 100% cloud Internet security solutions to protect them against cyber attacks and data loss every day. Powered by the world’s largest security cloud delivering the industry’s fastest time to protection, Cyren protects enterprises with award-winning security-as-a-service for web, email, sandboxing, and DNS, and embedded threat intelligence solutions for security vendors and service providers.
Cyren Web Security is a 100% cloud-delivered service, providing a quick-to-deploy, easy-to-manage SaaS secure web gateway for business. Our multi-layered cloud defenses protect your users from advanced malware, ransomware and phishing wherever they are, and on whatever device they may be using, while a powerful policy and reporting engine provides superior visibility and control of web usage.

Hardware-based 2-factor authentication

VeriSign
http://www.verisign.com
Tel: +1 650 426 5130
VeriSign® Unified Authentication is the most comprehensive strong authentication solution, offering a wide choice of credentials, devices, and deployment options for securing global enterprises. VeriSign Unified Authentication provides a single, integrated platform for provisioning and managing any type of two-factor authentication credential. By adhering to open standards and leveraging your existing infrastructure, Unified Authentication greatly reduces the cost and complexity of deploying a strong authentication solution. VeriSign Intelligent Infrastructure lends scalability to the Unified Authentication technology, giving you flexibility to expand your business and greater control of your network security environment.
VeriSign Unified Authentication

Software-based Strong Authentication

Cyxtera Technologies
www.cyxtera.comTel: +1-866-524-4782 or +57 1- 2362455
Cyxtera is simplifying the way businesses deal with and effectively deploy Â– security for online transactions. We provide solutions for identifying and preventing online transaction fraud while helping institutions comply with existing US domestic and international two factor authentication requirements. Using our advanced transaction fraud prevention solutions, we help protect online businesses and enterprise applications from phishing attacks, online credential theft and Internet fraud threats.

Mutual authentication

Law enforcement enablement

Try RiskIQ PassiveTotal for free by visiting www.riskiq.com/whats-new-passivetotal.

Sponsor Solutions

Prevent cousin domains

Detect and analyze attacks

Takedown

End User Awareness & Training

Fraud analysis

Forensic services Application gateways

Consumer toolbars

Email authentication

Email filtering

Web filtering

Hardware-based 2-factor authentication

Software-based Strong Authentication

Mutual authentication

Law enforcement enablement

SPONSORING SOLUTIONS

MEMBERSHIP

MORE IN APWG