Phishers automate attacks using 'Google hacking' (old news - 08:10AM Monday Mar 02 2009)
Why pay when you can pwn? By John Leyden The Register 2nd March 2009
Three in four phishing sites are hosted on compromised servers, according to a new survey.
A study of 2,486 fraudulent websites found that 76 per cent were housed on hacked webservers, typically pwned after hackers identified well-known vulnerabilities using search engine queries. Free web hosting for fraudulent websites was used in just 17.4 per cent of cases.