With the advent of free DV SSL certificates from Let’s Encrypt and others compounded by browsers indicating SSL connections are secure, criminals are now exploiting this capability to fool users into thinking their sites are legit. This BoF will discuss latest data on phishing and outline what can be done to help mitigate this emerging threat. Attendance is strictly limited to allow for a small group experience.