Phishing plug-in aims to hook scammers

Netcraft aims to make browsing safer...

NEWS

Netcraft has released an Internet Explorer plug-in that could help people avoid becoming victims of online fraud.

The internet security company heralded the plug-in toolbar, which displays information about the websites a surfer is visiting, as a strong weapon against phishing attacks.

The company, best known for providing statistics on what software websites are running, stated in a posting: "The Netcraft Toolbar provides you with constantly updated information about the sites you visit as well as blocking dangerous sites. This information will help you make an informed choice about the integrity of those sites."

The toolbar displays information about the popularity of a site, the country in which the site is hosted and the internet address of the site. It also indicates whether other toolbar users have flagged the site as a possible phishing scam which uses fake websites that look like they belong to a trusted provider, such as a bank, to fool people into handing over sensitive personal information.

Netcraft director Mike Prettejohn said the effectiveness of the toolbar will largely depend on how widely the software is adopted.

"If the big banks go for branded versions to give to their customers, then [it will be] very effective," he said. "It's only been public for two days, and there is already an effective community of people blocking phishing sites."

The software is available as a plug-in for Microsoft's Internet Explorer web browser and can be downloaded from Netcraft. A version of the program that runs on the Firefox browser from the Mozilla Foundation is also under development, the company said.

Robert Lemos writes for CNET News.com.

Comments

There are 3 comments. Join the discussion

  1. 1. anonymous

    Are they working on a Mozilla / Firefox or Netscape plugin(s) as well (for the folks that don't support the IE browser)?

    • 31 December 2004 10:14
    • Add comment
  2. 2. anonymous

    Don't know if Mozilla are looking into this - but in the meantime, maybe the 'SpoofStick' plugin may help. It works by displaying only the most relevant domain information - so you should be able to see that you are still within a secure domain - and have not been re-directed to a phisher's, er, pond.
    As the writers of the plugin say, it is basic, but it does give you a simple visual check system. This could help before something more concrete comes out.

    • 31 December 2004 13:50
    • Add comment
  3. 3. anonymous

    What about a version for KDE/Konqueror running under Linux please ?

    • 29 January 2005 20:02
    • Add comment

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your silicon.com account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy.

Questions about membership? Find the answers in the Membership FAQ

Get silicon.com's daily newsletter

  • Register on silicon.com

    Enter your email to register

Keep in touch with silicon.com

silicon.com newsletters