Not long ago, phishing attacks were easy to spot.

They’d be rife with misspellings or link to suspicious looking login pages. That’s changing, writes internet security expert Brian Krebs.

Hackers are getting more sophisticated, sending potential victims to legitimate looking web pages, sometimes hosted on the “secure” HTTPS domain. Web security firm PhishLabs recently reported that the number of phishing sites hosted on HTTPS has doubled in the past year.

That means companies and individuals need to keep on their toes. Krebs’ article offers some useful tips on how to thwart these new techniques.