Security watchers are reporting a surge of phishing attacks targeting European banks. Phishing attacks against over two dozen European banks were detected by security firm Websense last weekend (17-18 September).

Traditionally, fraudsters have targeted North American banks in phishing attacks. "This is the first time we have observed a significant number of European victims over a short period of time. The banks being targeted are predominately located in Spain and Italy," Websense notes.

Scam emails that form the basis of phishing attacks commonly pose as 'security check' emails from well-known businesses. These messages attempt to trick users into handing over their account details and passwords to bogus sites. The latest messages are composed in the primary language of the bank, indicating some degree of sophistication to the attacks.

Screenshots of a half-dozen example sites are here.

Separately, Trend Micro reports that keystroke-logging Trojan software originating in Brazil has tipped up in the UK and Ireland. The TSPY_BANCOS.AFG Trojan began in the land of the Samba but has now spread internationally. The malware is designed to capture bank passwords and forward this information to fraudsters. ®

Related stories

• Trojan uses smut to filch bank details (5 May 2006)
• Say Hi to the mouse click capturing Trojan (16 March 2006)
• Security threats soar in 2005 (7 December 2005)
• Phishing attack targets one-time passwords (12 October 2005)
• Updated Phishers target Yahoo! Photos (26 September 2005)
• Symantec hooks anti-phishing firm WholeSecurity (23 September 2005)
• Comment Playing the phishing blame game (8 September 2005)
• E-banking security provokes fear or indifference (7 September 2005)
• US-only trials for MS anti-phishing toolbar (1 September 2005)
• Phishers and security firms in malware 'arms race' (24 August 2005)
• Fax-back phishing scam targets PayPal (11 August 2005)
• Spear phishers launch targeted attacks (2 August 2005)
• Phishing attacks soar as viral onslaught wanes (29 July 2005)
• ID theft fears prompt ecommerce boycott (21 July 2005)