The Anti-Phishing Working Group (APWG) is an international
consortium
A consortium () is an association of two or more individuals, companies, organizations, or governments (or any combination of these entities) with the objective of participating in a common activity or pooling their resources for achieving a ...
focused on providing guidance and collecting data to reduce the risks of
fraud
In law, fraud is intent (law), intentional deception to deprive a victim of a legal right or to gain from a victim unlawfully or unfairly. Fraud can violate Civil law (common law), civil law (e.g., a fraud victim may sue the fraud perpetrato ...
and
identity theft
Identity theft, identity piracy or identity infringement occurs when someone uses another's personal identifying information, like their name, identifying number, or credit card number, without their permission, to commit fraud or other crimes. ...
caused by
phishing
Phishing is a form of social engineering and a scam where attackers deceive people into revealing sensitive information or installing malware such as viruses, worms, adware, or ransomware. Phishing attacks have become increasingly sophisticate ...
and related incidents.
It was founded in 2003 by a US-based company,
Tumbleweed Communications in collaboration with banks, financial institutions, and e-commerce service providers.
Some APWG members are undisclosed, but as of December 2024, public members of the steering committee include
Microsoft
Microsoft Corporation is an American multinational corporation and technology company, technology conglomerate headquartered in Redmond, Washington. Founded in 1975, the company became influential in the History of personal computers#The ear ...
,
RSA Security,
Verisign,
PayPal
PayPal Holdings, Inc. is an American multinational financial technology company operating an online payments system in the majority of countries that support E-commerce payment system, online money transfers; it serves as an electronic alter ...
,
Adobe,
ICANN
The Internet Corporation for Assigned Names and Numbers (ICANN ) is a global multistakeholder group and nonprofit organization headquartered in the United States responsible for coordinating the maintenance and procedures of several dat ...
,
Docusign,
LinkedIn
LinkedIn () is an American business and employment-oriented Social networking service, social network. It was launched on May 5, 2003 by Reid Hoffman and Eric Ly. Since December 2016, LinkedIn has been a wholly owned subsidiary of Microsoft. ...
,
Corporation Service Company, and
Fortra. Research partners include the
Institution of Electrical Engineers
The Institution of Electrical Engineers (IEE) was a British professional organisation of electronics, electrical, manufacturing, and information technology professionals, especially electrical engineers. It began in 1871 as the Society of Tel ...
, the
Cybersecurity and Infrastructure Security Agency,
CERT Polska, and other CERT organizations from various countries, including the
Czech Republic
The Czech Republic, also known as Czechia, and historically known as Bohemia, is a landlocked country in Central Europe. The country is bordered by Austria to the south, Germany to the west, Poland to the northeast, and Slovakia to the south ...
,
Azerbaijan
Azerbaijan, officially the Republic of Azerbaijan, is a Boundaries between the continents, transcontinental and landlocked country at the boundary of West Asia and Eastern Europe. It is a part of the South Caucasus region and is bounded by ...
, and
Japan
Japan is an island country in East Asia. Located in the Pacific Ocean off the northeast coast of the Asia, Asian mainland, it is bordered on the west by the Sea of Japan and extends from the Sea of Okhotsk in the north to the East China Sea ...
.
See also
*
Scareware
Scareware is a form of malware which uses Social engineering (security), social engineering to cause Acute stress reaction, shock, anxiety, or the perception of a threat in order to manipulate users into buying Potentially unwanted program, unwa ...
*
PhishTank
References
External links
*
APWG European Union chapter
Organizations based in Middlesex County, Massachusetts
Cybercrime
Spamming
Technology consortia
{{international-org-stub