Rock Phish refers to both a phishing toolkit/technique and the group behind it.[1][2]
Rock Phish is an individual or group of actors likely working out of Romania and nearby countries in the region. This group has been in operation since 2004 and is responsible for innovation in both spam and phishing attacks to date, such as pioneering image-spam (Ken Dunham, VeriSign)
{{cite web}}: |author= has generic name (help)
The first thing you need to know about Rock Phish is that nobody knows exactly who, or what, they are.