Why pay when you can pwn?
By John Leyden
The Register
2nd March 2009
Three in four phishing sites are hosted on compromised servers, according to a new survey.
A study of 2,486 fraudulent websites found that 76 per cent were housed on hacked webservers, typically pwned after hackers identified well-known vulnerabilities using search engine queries. Free web hosting for fraudulent websites was used in just 17.4 per cent of cases.
Full article via The Register