Yahoo service attempts to cut line on phishers

Juan Carlos Perez   Today’s Top Stories   or  Other Cybercrime and Hacking Stories  

IT Leadership Strategy: How to Provide World-Class Help Desk Support Forrester Best Practices: Improve IT Service Delivery and Support with Remote Services Make Customer Experience a Cornerstone of Your Revenue Strategy Web Threat Protection Getting in Compliance With Government Data Regulations By Leveraging Online Security Technology The Latest Advancements in SSL Technology Computerworld Report- Large Enterprises Pay More for IPAM Computerworld Technology Briefing: Intelligent Users Use Business Intelligence Virtual Reality Sign up to receive Cybercrime and Hacking Resource Alerts

August 18, 2006 (IDG News Service) -- Yahoo Inc. is testing a security service designed to prevent Web surfers from landing on sites that look like they are from Yahoo but that are fake ones set up by fraudsters to carry out phishing scams.

The service lets users know if they have landed on a legitimate Yahoo sign-in Web page, preventing them from entering their Yahoo ID and password on a phishing site.

The service, which currently supports only U.S. Yahoo Web sites, is being tested and hasn't been officially announced yet, a Yahoo spokeswoman said via e-mail on Friday.

Phishing is a monumental online security problem. Scammers set up legitimate-looking Web sites from well-known companies, such as banks, online stores and Web portals, and try to lure people to them via e-mail and other methods. The idea is to trick people into entering into the sites sensitive information, such as passwords and credit card numbers, for malicious purposes, such as ID theft and fraud.

Each Yahoo sign-in seal is associated with an individual computer, so users need to install it on every computer they use. Once installed, the seal will appear on Yahoo sign-in screens, letting users know the site is genuine. Creating a seal involves either entering some text terms or uploading an image. The text or the image are displayed in the seal, which will only appear on Yahoo sign-in screens and thus offers no protection on sites from other companies.

Yahoo cautions that there are reasons why the seal may not appear on otherwise genuine Yahoo sign-in pages. "For example, someone else using your computer may have deleted or changed your seal, your cookies or files on your computer may have been deleted, or you're using a partner or international Yahoo site," Yahoo's site reads. "To be safe, look for these other clues to make sure you're on a genuine Yahoo sign-in screen."

If the computer is shared among family or friends, it is a good idea to show everyone the sign-in seal so they recognize it. For computers in public places, like libraries, the sign-in seal should be created by the locales' administrators and not by visiting users, according to Yahoo.

Reprinted with permission from

IDG.net
Story copyright 2008 International Data Group. All rights reserved.

Print this Story

Send Us Feedback

E-mail this Story

Digg this Story

Slashdot this Story

"The Payment Card Industry Data Security Standard (PCI DSS) being pushed by the major credit card companies has probably done..." Read more... "At this big apparel company, there's a data upload every night from factories to HQ. But one morning, this pilot..." Read more... Read more Security posts or See all Blogs

Microsoft's Web site overwhelmed by would-be Windows 7 downloaders FAQ: How to get the Windows 7 beta Google: Chrome in 'never-ending' beta More top stories...

Review: Windows 7 Beta 1 shows off new task bar, more UI goodies Elgan: Palm and Sony out-Apple Apple Memory card standard could provide up to 2TB on an SD card

The 9 hottest skills for '09 The downturn has softened the IT talent market but done little to weaken demand for SAP, .Net and other technical skills. Fast fixes for common PC problems Every computer user hits a speed bump now and then. Here are some speedy, simple solutions to hardware, software, network, Internet and mobile-device crises. Apple's 5 biggest moments in 2008 From the iPhone 3G to 'unibody' MacBooks, 2008 was a standout year for Apple. Hands-on Linux: New distro versions push the envelope We've got reviews and videos of the new Ubuntu 8.10, Fedora 10 and openSUSE 11.1. Windows 7 Get the latest news, reviews and more about Microsoft's newest desktop operating system More Continuing Coverage Windows 7 Voting Technology Google's Chrome browser Economy in turmoil: Latest news and tips iPhone 3G Bill Gates moves on Windows Vista A to Z Mac A to Z 2008 Salary Survey Find wage data for 50 IT job titles. More Special Reports 2009 Premier 100 IT Leaders 2008 Premier 100 IT Leaders 2007 Premier 100 IT Leaders 2008 Best Places to Work in IT 2007 Best Places to Work in IT 2008 Salary Survey 2007 Salary Survey 2006 Salary Survey 2008 IT Forecast 2007 IT Forecast 40 Years of Computerworld Top 12 Green-IT Users The FAQs About Going Green IT Schools to Watch iPhone: One Year Later Global Mobile Your Next Data Center Management: Reinventing IT Stop Data Leaks Web 2.0 Security Surviving Disasters Managing Storage Virtualization The Lean Storage Machine Storage on Trial Can Web 2.0 Save BI? Bypass These BI Potholes All Zones Business Continuity Zone The File Data Management Zone Security Management Zone The SAS Zone Business Intelligence and Analytics Zone The Enterprise Search Zone Software as a Service Zone The Security Zone See your link here

Avoiding the Latest Phishing Attacks Avoiding the Latest Phishing Attacks Watch this on-demand webcast right now for free, compliments of Computerworld and MessageLabs. Go to the webcast  Computerworld Executive Bulletin: Building a Robust Antivirus Defense Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing  White Papers Read up on the latest ideas and technologies from companies that sell hardware, software and services. Learn how Xythos and Microsoft enable customers to benefit from the best of both approaches to document management and collaboration. NetApp and VMware Virtual Infrastructure 3 Storage Best Practices Environmental Sustainability and Networking View more whitepapers  Creating a green data center to help reduce energy costs and gain a competitive advantage Download this new white paper today! (Source: VMware) With today's rapid IT growth, companies are looking to consolidate datacenter operations to achieve space and cost savings. And as energy costs continue to rise, datacenter efficiency becomes even more important. This IBM report details how companies are reducing energy usage and costs to gain a completive advantage. Download this white paper

• Microsoft's Web site overwhelmed by would-be Windows 7 downloaders
• Review: Windows 7 Beta 1 shows off new task bar, more UI goodies
• FAQ: How to get the Windows 7 beta
• More top stories 

In Security Stripping away the trappings of applications, systems and networks, information is the core asset of most organizations. Our columnist describes how asserting the importance of information governance is crucial to making that asset tangible, addressable and protected. Click here to read the latest column by Jon Espenschied

Virtualization Technologies and Their Impact on Disaster Recovery Double-Take Software delivers enterprise-class disaster recovery and high availability solutions for cutting-edge virtual environments. Learn how your business can leverage virtual technologies to achieve complete confidence in the unparalleled data protection, availability, and recoverability while simplifying your overall IT management. Download this white paper now!

The Spy Files For Congress to do anything that helps protect consumers and the critical Internet infrastructure as a whole, it must pass laws that require proactive processes to protect computers, not that tell people how to deal with the resulting mess, says Ira Winkler. Click here to read the latest column by Ira Winkler