Apart from two-factor and user awareness is there anything meaningful
we can do against phishing ?

Is it time to stop paying anti-phishing vendors who do domain-name
search , who have spam traps etc ?

There are many vendors providing take down services - pay-per-use and
also bulk - do these make sense?

[ reply ]