Phishing

Anti-Phishing: Best Practices for Institutions and Consumers
White paper with detailed advice on controls against phishing. [PDF]
http://www.mcafee.com/us/_tier2/products/_media/mcafee/wp_antiphishing.pdf

Bank Safe Online
Advice from a UK banking industry group about phishing, money mules and Trojans.
http://www.banksafeonline.org.uk/

BBB Online - Phishing
Better Business Bureau's advice on how to avoid and report phishing attacks.
http://www.bbbonline.org/idtheft/phishing_cond.asp

CallingID
Free anti-phishing browser toolbar and embedded link checking software alerts the user if it detects phishing and related risks. Commercial products offer mutual authentication of websites and users.
http://www.callingid.com

Castlecops
The Phishing Incident Reporting and Termination team aims to respond quickly to phishing sites and get them taken offline as soon as practicable.
http://wiki.castlecops.com/PIRT

Comodo Inc.
Provider of X.509 digital certificates to authenticate genuine website contents, giving consumers greater confidence that they are not interacting with fake websites run by phishers.
http://www.contentverification.com

Gallery of Phishing Scams
A simple gallery of phishing messages claiming to come from banks, credit card companies etc. Learn to recognize phishing emails by studying these examples.
http://worldwidespam.info/phishing/

GeoTrust Inc.
TrustWatch provides free anti-phishing toolbar and browser extensions that identify dubious sites in Google search results.
http://www.trustwatch.com/

GralicWrap
Free anti-phishing software for Internet Explorer uses fraudulent site reports submitted by users to build a global blacklist.
http://www.gralicwrap.com

Green Armor Solutions
Sells Identity Cues software to help users recognize fake websites through visual reminders linked to user login details.
http://www.greenarmor.com/

McAfee
Site Advisor anti-phishing toolbar plus free limited-functionality version.
http://www.siteadvisor.com/

Netcraft
Browser toolbar to report and block phishing sites identified by the toolbar user community. Identifies in which countries websites are hosted as further clues to their authenticity.
http://toolbar.netcraft.com/

OnGuard Online
Phishing section of an informational website run by the US Federal Trade Commission. Advises consumers on how to spot, avoid and report phishing attacks. Free phishing awareness videos.
http://onguardonline.gov/phishing.html

Payments News
Phishing-related news from the financial services industry.
http://www.paymentsnews.com/phishing/

The Phishing Guide
White paper explains how phishing works and outlines control measures that can be taken by individuals and institutions to minimize the risks. [PDF]
http://www.ngssoftware.com/papers/NISR-WP-Phishing.pdf

PhishTank
Clearing house for information on phishing sites reported by the public plus an open API to integrate the data into anti-phishing applications.
http://www.phishtank.com/

Scamdex
Archive of tens of thousands of scam emails in five categories, with advice on avoidance and reporting.
http://www.scamdex.com

Spoof Email Tutorial
Explains how scammers trick people into thinking they're being contacted by eBay.
http://pages.ebay.com/education/spooftutorial/

US-CERT Cyber Security Tip on Preventing and Responding to Identity Theft
Straightforward advice for those who fall prey to phishing and similar attacks.
http://www.us-cert.gov/cas/tips/ST05-019.html

Why Phishing Works
Research paper from Harvard evaluated the deceptiveness of typical phishing emails. [PDF]
http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf

Wikipedia: Phishing
Explains common phishing methods and dangers. Lots of references.
http://en.wikipedia.org/wiki/Phishing