Posted: 21st Apr, 2005 By: MarkJ
Global ISP AOL is putting in place a monitoring process 24/7 to identify and block '
phishing' websites for anyone using the AOL software to access the Internet. The provider already blocks
phishing email attempts:
"Phishing and identity theft are the fastest-growing security threats online, and we will work around the clock to protect our members with the tools we have available, said Tatiana Platt, AOL Senior Vice President and Chief Trust Officer. By limiting our members' access to suspected phishing sites, we're trying to cut the lines before a phisher can reel them in and steal sensitive financial and personal information. And we're just getting started. Over coming months, we'll continue to roll out new and stronger technological and legal defenses against phishers, scammers and identity thieves."
America Online is working with Cyota to evaluate potential phishing sites based on member feedback through its "Report Spam" button and through other sources. When a possible phishing site is identified, AOL limits access to the site though the AOL client and informs any member who attempts to visit it that it is suspected of being a dangerous site. In addition to sites that fraudulently attempt to spoof pages of the AOL® service, America Online is working to block access to fraudulent web sites imitating other legitimate companies like banks, credit card issuers, online auctions, and online payment facilitators.
In addition to the effort announced today, AOL has also deployed a range of other tools and strategies both visible and behind-the-scenes to help protect members from phishing scams. Among those:
AOL Official Mail: AOL created and remains the only ISP to use a different color, icon, look, and feel to identify legitimate official e-mail correspondence from the company.
Spam/Phishing Blocking: As part of spam fighting efforts, AOL uses a variety of methods to block unusual quantities or types of e-mails that pass through AOL's servers.
AOL PassCode: The AOL PassCode device is offered as a premium service that allows members to add a second level of corporate-strength authentication to their accounts.
AOL Money Alerts: AOL Money Alerts notify members of unusual account activity on their registered bank accounts or credit cards.
Member Education: AOL has placed messaging to members on every e-mail and on every IM window that lets them know that AOL staff will never ask for their password or billing information.