Overview
In the month of May, a significant increase in phishing websites targeting SBI Securities was reported, with numbers surging to nine times that of the previous month. While Rakuten Securities was the most frequently reported last month, SBI Securities has taken the lead in May, with a similar trend expected in June. This indicates a strategic shift in target selection by cybercriminals, who appear to be deploying phishing sites across different securities brands indiscriminately.
Trends in Phishing Attacks
The report underlines a worrying trend; there seems to be no pattern in the selection of targeted securities firms. This makes it crucial for clients of major and well-known securities companies to remain vigilant, as phishing sites have been identified for nearly all major brands. Cybercriminals typically use emails or SMS messages to spread these malicious links, aiming to steal users' IDs and passwords.
According to Japan's Financial Services Agency, the number of fraudulent transactions has already approached 6,000, with unauthorized trading exceeding 500 billion yen, leading to considerable financial damage. Securities companies must implement two-factor authentication and other security measures to avert losses from such attacks.

Image is a representative example of a phishing website and may not correspond directly with the contents within.
Warning: Phishing Sites Related to Transit Services
As summer approaches, a seasonal increase in phishing sites related to transit services such as 'Eki-net' and 'ETC' is expected from June to September. Phishing messages often purport to alert users regarding