Mitigating phishing attempts

A method, comprising:

• receiving a URL that is associated with a suspected credential phishing web page, wherein the suspected credential phishing web page includes at least one element soliciting at least one credential, and wherein the URL was included in a message having at least one intended recipient;
• providing an artificial credential to the suspected credential phishing web page, wherein the artificial credential comprises a generated password, and wherein the artificial credential, when supplied during a request to access a resource, indicates that the attempted access to the resource is unauthorized;
• receiving an indication that, subsequent to providing the artificial credential to the suspected credential phishing web page, an attempted use of the artificial credential to access the resource was made;
• and
• in response to the receiving the indication that the attempted use of the artificial credential to access the resource has been made, taking at least one remedial action with respect to the suspected credential phishing web page.

A computer program product embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:

• receiving a URL that is associated with a suspected credential phishing web page, wherein the suspected credential phishing web page includes at least one element soliciting at least one credential, and wherein the URL was included in a message having at least one intended recipient;
• providing an artificial credential to the suspected credential phishing web page, wherein the artificial credential comprises a generated password, and wherein the artificial credential, when supplied during a request to access a resource, indicates that the attempted access to the resource is unauthorized;
• receiving an indication that, subsequent to providing the artificial credential to the suspected credential phishing web page, an attempted use of the artificial credential to access the resource was made;
• and
• in response to the receiving the indication that the attempted use of the artificial credential to access the resource has been made, taking at least one remedial action with respect to the suspected credential phishing web page.