Phishing scams top UK spy agency’s biggest cyberattacks

Tuesday, 27 February, 2018

Phishing spoofs, where users are invited to click on links to fake websites in an effort to scam them out of their details, still head the UK’s most common cyberattacks.

The National Cyber Security Centre (NCSC) has said it detected and prevented millions of online attacks aimed at the UK’s critical infrastructure, one year since the Active Cyber Defence (ACD) initiative was launched.

12 months ago the NCSC launched four pioneering programs: Web Check, DMARC, Public Sector DNS and a takedown service.

These programmes are free at the point of use and can block fake emails, remove phishing attacks and stop public sector systems being infected by malicious code.

Phishing: How to protect yourself to beat scammers

A report into the work done over the past 12 months lists some of the scam domains containing phishing emails that have now been removed.

Among the top most phished were HMRC, the DVLA, Student Union Loans and the Crown Prosecution Service.

Through the National Cyber Security Centre, the UK has taken a unique approach that is bold and interventionalist, aiming to make the UK an unattractive target to criminals or nation states.

This report shows that simple things, done at scale, can have a positive and measurable effect and the British public should be safer as a result of these measures.

But there is a lot more to be done. The successes we have had in our first year will cause attackers to change their behaviour and we will need to adapt.

- Dr Ian Levy: Technical Director, National Cyber Security Centre

Biggest phishing in UK council email

The NCSC initiative has seen a drop in the UK’s share of global phishing attacks down 5.3% with 121,479 sites hosted in the UK and a further 18,067 global sites removed.

There have been more than one million security scans and 7 million security tests carried out on public sector websites.

The initiative boasts they have blocked 4.5 million malicious emails a month.

Takedown times for sites pretending to be from the government came down from 42 hours to just 10 and there was a significant fall of scam emails from a bogus @gov.uk address such as taxrefund@gov.uk.

Among the organisations who have been the most effective at defending themselves from malicious attempts were local authorities.

Honourable mention goes to to Northumberland County Council which stopped 59,405 attempts, Cardiff Council with 31,728 and Denbighshire County Council with 25,627.

MAIN IMAGE: Lee Jordan/CC BY-SA 2.0

Tim Bamford author picture

By:

Tim is a veteran freelance journalist writing extensively on internet news and cybersecurity.

News What's the story?

Keep up with the latest developments in UK broadband.

Why is the UK worried about Huawei and what does this mean for 5G?

The Huawei controversy continues as Boris Johnson says we ‘will not risk British security”.

Why is the UK worried about Huawei and what does this mean for 5G?Why is the UK worried about Huawei and what does this mean for 5G? Read more

Unmissable streaming TV shows for 2020

Telly has moved online - let's dive in to the most bingeworthy releases due this year!

Read more

The most complained about home broadband services

Who's failing to live up to expectations?

Read more

Brits spend up to 4.9 hours surfing the web at work!

Read more

Help Learn with us

Make the most of the internet with our broadband library.

What are the differences between HD, UHD, 4K and 8K?

What are the differences between HD, UHD, 4K and 8K?What are the differences between HD, UHD, 4K and 8K? Read more

How far can augmented reality take us?

Read more

Keeping the Internet of Things secure

Read more

The best broadband routers for 2020

Read more