Sites like phishtank and clean-mx act as crowdsourced phishing detection and validation. By knowing how to look, you can consistently find interesting information about how attackers work, and the tools they use to conduct phishing campaigns. This post will give an example of how phishing kits are used, how to find them, as well as show a case study into other tools attackers use to maintain access to compromised servers.
more here.............http://jordan-wright.github.io/blog/2014/07/30/how-to-hunt-down-phishing-kits/
more here.............http://jordan-wright.github.io/blog/2014/07/30/how-to-hunt-down-phishing-kits/