News Blog

Read all 'Spam and phishing' posts in News Blog
May 27, 2008 8:57 AM PDT

Yahoo sues over lottery phishing scam

by Stephen Shankland
  • 7 comments

Yahoo has filed suit against unnamed "lottery spammers" who tried to fool people into thinking that they won a prize from Yahoo so they'd share passwords, credit card numbers, or other sensitive information.

The Internet company on Tuesday said it filed the suit in the U.S. District Court for the Southern District of New York, citing the Federal Trademark Act, the Can-Spam Act, and related state laws.

"The unauthorized use of Yahoo's trademarks is misleading, fraudulent, and has actually confused, misled, and deceived the public," Joe Siino, Yahoo's senior vice president for global intellectual property and business strategy, said in a statement.

According to Barracuda Networks, 90 percent to 95 percent of e-mail sent in 2007 was spam. Phishing, one activity associated with spam, involves sending e-mail masquerading as authentic messages designed to fool users into parting with personal information.

March 21, 2008 12:01 AM PDT

Block spam, phishing attempts in Outlook

by Dennis O'Reilly
  • 1 comment

The battle for your in-box shows no signs of waning.

Despite the efforts of software companies large and small, spammers and phishers continue to find and exploit weaknesses in junk-mail filters at the server and client levels. After years of foil and parry between these two forces, you would think that Microsoft Outlook, the most widely used e-mail program in the world, would be a paragon of in-box defenses.

Then again, this is Microsoft we're talking about, a company not noted for being the paragon of anything more than profitability.

A few years back, Service Pack 2 for Office 2003 added phishing filters for Outlook that move suspicious messages to your Junk E-mail folder automatically and turn off links in the messages. Outlook 2007 was released about a year-and-a-half later with only a few new junk-mail defenses. In fact, the Junk E-mail Options screens of the two versions are nearly identical.

Microsoft Outlook 2003 Junk E-mail Options dialog box

The junk e-mail options in Outlook 2003 don't offer many options.

(Credit: Microsoft)

Microsoft Outlook 2007 Junk E-mail Options dialog box

The only difference between the Junk E-mail Options in Outlook 2007 and its predecessor are the bottom two options.

(Credit: Microsoft)

In the past, I have created a series of Outlook rules to stem the flow of junk to my in-box. The process is straightforward though somewhat time-consuming: Click Tools > Rules and Alerts > New Rule, and step through the Rules Wizard. You can also right-click a message you want to base the rule on and choose Create Rule, and then either make your selections, or click Advanced Options to open the Rules Wizard.

If you find yourself spending an inordinate amount of time dealing with junk e-mail, your best solution is a third-party spam and phishing filter. There are lots of free versions available for download, but the freebies either require too much work on your part to make them effective, or they work with only a single mail account, place text ads on your outgoing messages, or come up short in some other way.

Your best bet may be to bite the bullet and pay for a commercial junk-mail filter. My favorite is one that has been around for a long time: Cloudmark Desktop, which comes in versions for Outlook and Outlook Express, as well as for Mozilla Thunderbird. The program is available for a 15-day free trial. A one-year subscription for two PCs costs $40 (multiple licenses and volume discounts are available).

Cloudmark adds a toolbar to Outlook that lets you scan a folder for junk with a couple of clicks. It places spam and phishing attempts in a Spam folder and lets you block and unblock mail from specific senders. The program works quickly: It scanned a folder with more than 2,000 messages in just a couple of minutes, and I didn't notice any slowdown when I sent and received mail.

Cloudmark Desktop toolbar for Microsoft Outlook

The Cloudmark Desktop junk-mail filter adds a toolbar to Outlook that lets you scan a folder for spam, and block or unblock specific senders.

(Credit: Cloudmark)

You get more control over how junk mail is treated via the program's Options menus, which let you scan for junk selectively rather than automatically, and change the location of your junk-mail folder. You can choose to delete the junk immediately, after a week, or after a month. Your Outlook contacts can be added to your trusted list with a single click, and you can see how many messages have been checked, how many were identified as spam automatically, and how many spam and phishing messages you've blocked.

Cloudmark Desktop for Microsoft Outlook options dialog box

Cloudmark Desktop's options let you change the folder your junk mail is stored in, and decide when to delete the junk.

(Credit: Cloudmark)

When you're ready to get serious about locking spammers and phishers out of your Outlook in-box, Cloudmark is ready to do the heavy lifting.

Monday: simple ways to speed up Windows shutdowns.

Originally posted at Workers' Edge
Dennis O'Reilly has covered PCs and other technologies in print and online since 1985. Along with more than a decade as editor for Ziff-Davis's Computer Select, Dennis edited PC World's award-winning Here's How section for more than seven years. He is a member of the CNET blog Network, and is not an employee of CNET.
February 20, 2007 1:45 PM PST

Phishers hook up to Web 2.0

by Karen Said
  • Post a comment

There's something unusual about a phishing scam doing the rounds, which uses a news hook--a fake report that Australian Prime Minister John Howard has had a heart attack--to try to lure in victims. That's not new--worm wranglers have turned to Bin Laden and Saddam Hussein to get people to click on dodgy links. What is interesting is that the hackers are using Web 2.0 technology in their scam.

People who fall victim to the scam download a Trojan horse to their computer that records their keystrokes and Internet activity, according to security company Websense. So far, so normal, as phishing techniques go.

But the malicious software also records the IP addresses of the infected PCs. The hackers can then pinpoint the physical location of the machines using Google Maps software. That could be useful to know if the fraudsters intend to pose as the victims.

Web 2.0 has come under the security microscope--although more as a potential weak point than as a handy tool for attackers. Hackers are known to be fast to pick up on new tech tricks. What's next?

  • prev
  • 1
  • next
advertisement
Click Here

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

About News Blog

Recent posts on technology, trends, and more.

Add this feed to your online news reader



advertisement

Inside CNET News

Scroll Left Scroll Right