The number of web phishing sites has hit a record high, but the number of actual phishing attacks is down.
Phishing sees criminals trying to lure internet users to fake branded websites, such as banking sites, in an attempt to glean sensitive information from visitors, such as on-line banking details.
According to industry body the Anti-Phishing Working Group (APWG), 5,260 phishing sites were recorded in August, substantially up from the 4,565 in July.
However, the number of spam e-mail campaigns to lure people to phishing sites actually decreased for the second month in a row, from 14,135 to 13,775, said the APWG.
The APWG said increased awareness of phishing had meant that phishing sites are being taken down earlier, while phishers are being forced to use a greater number of servers to sustain their scams, meaning their costs are higher.
The number of days a phishing site is on-line dropped in August to an average of 5.5 days, down from the 5.9 days in July, the APWG said.