Microsoft Bolsters Phishing Filters in IE
31806
Microsoft's anti-phishing technology is about to get better thanks to technology from Georgia-based Digital Resolve. The company's Trusted Server technology will make it into phishing filters in IE6 and IE7, as well as the Windows Live Toolbar.
687090
Security researchers warned this week of a vulnerability in most Web browsers which could potentially allow scammers to launch phishing attacks from pop-up windows on trusted Web sites.
690197
In response to the growing threat that phishing poses to e-mail users, SurfControl plans to upgrade its e-mail filter to catch these attacks, and flag more spam and other abuses.
143342
A vulnerability in Internet Explorer spells potential trouble for Skype users who add or play video in their chats.
617001
(InfoWorld) - MicrosoftÂ is using data-mining techniques from a third party in its Internet browsers toÂ guard against "phishing"Â attacks, where dubious Web sites try to harvest personal information from unknowing victims. Digital Resolve, of Norcross, Georgia, announced Tuesday that Microsoft is licensing data that comes from its Trusted Server technology, which crawls the Internet and builds lists of Web sites and their legitimate IP (Internet Protocol) addresses. The data will beÂ used by the antiphishing filterÂ in Microsoft's Internet Explorer versions 6 and 7 in addition to Windows Live Toolbar, a browser search box, Digital Resolve said. The technology focuses heavily on the Web sites of financial companies and e-commerce sites. It looks at 39 characteristics of a Web site, including IP address, location, domain and the Internet Service Provider, said Dennis Maicon, Digital Resolve's vice president for financial services solutions. It also checks how long a particular domain is valid based on its registration information. "When somebody goes to type in Barclays.com, it's able to then take that URL, resolve it to an IP address, and then check against a list to see if it is an authorized Barclays server," Maicon said. The company says its technology takes the opposite approach of so-called "blacklists," which are lists of reported phishing sites, said Susan Daw, Digital Resolve's director of marketing. Keeping updated blacklists can be difficult as phishing sites may only be active for a short time, Daw said. Rather than comparing a URL (uniform resource locator) to a list of bad sites, Digital Resolve's technology lets the phishing filter know which sites are good, Daw said. Microsoft is using a combination of technologies for the phishing filter, including blacklists. Daw said the technology is 100 percent successful for Web sites it has indexed. However, it's the first time the technology has been deployed, she said. For suspicious Web sites, such as a bank site with an irregular URL, the phishing filter triggers a warning to the user to either continue viewing the site or close the Web page. Digital Resolve said the technology can guard against "man-in-the-middle" style attacks, where an attacker collects a victim's login and password before passing the person to the legitimate site. Those attacks are often mounted from an irregular IP address that can be checked, according to Digital Resolve. Â ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
29234
Security researchers have uncovered a spoofing flaw in Internet Explorer that could turn out to be the perfect holiday gift for scammers.
88476
Two recently disclosed vulnerabilities that affect Internet Explorer 7 and Windows Vista could let hackers nab user data.
96676
Microsoft on Wednesday released an update to Internet Explorer (IE) to fix a security flaw that was discovered a month ago and has since been exploited to attack users.
7141
(Article Central) Microsoft released its October batch of security advisories this week, with a number of &quot;critical&quot; patches, including a significant fix for the Internet Explorer browser.
765725
Microsoft has cobbled together dozens of third-party software plug-ins and add-ons that enhance IE and provided links to them from its Windows Marketplace site.
419543
InfoWorld - A vulnerability in Microsoft Internet Explorer (IE) browser could help fraudsters make phishing Web sites appear legitimate, a security researcher reported Wednesday.
532476
With one in every 400 emails now a suspected phishing attack, computer users are being encouraged to increase their knowledge, open their eyes, and pay attention.
609685
Microsoft today released an out-of-cycle security bulletin and patch for a critical hole in Internet Explorer that is already being widely exploited by attackers.
745224
Security experts uncovered yet another bug in Internet Explorer this week, one that could let attackers replace the content of any legit site with their own, making it possible to spoof critical pages such as e-bank account access log-in forms or credit
387184
Ziff Davis - Security researchers have uncovered a spoofing flaw in Internet Explorer that could allow a scammer to display a fake Web site with all the attributes of a genuine, secure site.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
741899
Following the lead of Mozilla's Firefox and Microsoft's Internet Explorer, Opera Software has incorporated a new phishing filter into its Opera Web browser to block sites bent on stealing financial information or other sensitive data from unsuspecting users.