Do-it-yourself phishing kits appear on web

The emergence of do-it-yourself phishing kits are likely to result in an increase of attacks, experts have warned.

The kits can be downloaded for free over the internet, making it possible for anyone to download the kits, launch their own attack and potentially defraud online banking customers, says security firm Sophos.

The company says DIY kits contain all the graphics, web code and text required to build a bogus online banking site.

Spamming software is also included to email potential victims, meaning have-a-go-phishers can try to trick recipients into giving away their banking details.

'The emergence of these 'build your own phish' kits mean any old Tom, Dick or Harry can now mimic bona fide banking websites and convince customers to disclose sensitive information such as passwords, PIN numbers and account details,' said Graham Cluley, senior technology consultant at Sophos.

'By putting the necessary tools in the hands of amateurs, it's likely that the number of attacks will continue to rise,' he said.

A spokeswoman for HSBC warned customers not to respond to any emails that appear to come from the bank and contain links to web sites asking for security details.

'We assure customers that this is not something we would do and which is therefore probably an attempted fraud,' she said.

What do you think? Email feedback@computing.co.uk

If you want to be first with the news, visit Computing every day.