Microsoft adds IE7 anti-phishing to IE6

[Tami]

If you have msn search toolbar, you can now protect yourself from phishers. Microsoft is offering a beta version of the Phishing Filter to those using IE6, MSN Search Toolbar and Windows XP SP2.

The download is available from Microsoft's [url=\"http://addins.msn.com/phishingfilter/\"]Addins Page[/url] and is a 1.3mb file.

[b]About Microsoft Phishing Filter[/b]

Phishing Filter is a feature in Internet Explorer 7.0 that helps determine whether a Web site is legitimate or a so-called phishing Web site.

Phishing Filter uses three checks to help protect users from phishing scams:

1. It compares the addresses of Web sites that a user attempts to visit to the addresses of sites that have been reported as legitimate. This list is stored on the user's computer.

2. It analyzes sites that a user attempts to visit by checking those sites for characteristics common to phishing sites.

3. If the user chooses, Phishing Filter sends the addresses of Web sites that a user attempts to visit to Microsoft to be checked against a frequently updated list of reported phishing sites.

[b]About Reported and Suspected Phishing Web Sites[/b]

• If a Web site that a user is attempting to visit is on the list of reported phishing sites, Internet Explorer 7.0 will display a warning Web page and a notification on the Address bar. From the warning page, the user can choose to continue or to close the page.

• A "reported" phishing site is one that has been confirmed by reputable sources as fraudulent and has been reported to Microsoft.

• If a Web site that a user is attempting to access is not on the list of reported phishing Web sites but has the characteristics of a phishing site, Internet Explorer will notify the user in the Address bar that the site is a suspected phishing site. The user can click the notification for details.

• Web sites deemed questionable by the Phishing Filter may be legitimate sites. The "suspected" designation simply means that the Web site has characteristics of a phishing Web site and is not on the list of reported legitimate Web sites stored on the user's computer.

• If users encounter a legitimate Web site that has been deemed "suspected" by the Phishing Filter, they can report the error by clicking on the "warning" in the address bar and then the reporting link.

[b]About Phishing[/b]

• A typical online phishing scam starts with an e-mail message that appears to come from a trusted source, such as a bank, credit card company, or known online merchant. The e-mail message often refers to problems with the recipient's account and urges the recipient to respond quickly to solve the problem. The message typically contains a link to a phony Web site. Recipients are asked to click the link, and the site then asks for personal or financial information.

• The recipient's personal and financial data are often used to perpetrate identity theft, drain back accounts, max out credit cards, and obtain fraudulent credit.

[b]About Avoiding Phishing[/b]

To help avoid falling victim to a phishing scam:

• Be defensive with personal information. Avoid giving away sensitive data in e-mail messages, instant messages, and pop-up windows. This includes your full name, address, phone number, e-mail address, and bank and credit card information, as well as this data about all family members. Take extra steps to safeguard your Social Security number.

• Be wary of clicking links in e-mail messages and instant messages.

• Visit only Web sites that provide privacy statements and help protect your data.

• Routinely review your financial statements and credit history. Report any suspicious activity.

The above information courtesy of [url=\"http://www.microsoft.com/mscorp/safety/technologies/antiphishing/at_glance.mspx\"]Microsoft[/url]