According to the January 2007 RSA Monthly Online Fraud Intelligence Report, the percentage of nationwide US banks targeted by phishing attacks rose from 28% to 31%. Concurrently, the percentage of regional institutions jumped from 37% to 46%. While 2006 saw many US Credit Union attacks, the main target in January 2007 has been smaller financial institutions.

The chart below represents the monthly figures I collected in various Anti-Fraud Command Center reports. It shows that the main targets are US regional institutions. As they are small, it is possible the cybercriminals think they are not as well protected compared to larger institutions, which constantly improve their protections. The focus has turned towards stealthier and more targeted attacks. Smaller institutions are ideal for this.

The full report, with all the January 2007 RSA trend analysis, can be downloaded at the following address : http://www.rp-net.com/online/104/0701_RSA_PIR.pdf