Protect Your Account From Phishing

They say it’s the login page to your account? Make them prove it

At some point, there’s a chance you may receive an e-mail that looks like it came from Yahoo!, taking you to something that looks like a Yahoo! Search Marketing login page, but something’s…not quite right. It could be a “phishing” attack from someone who is trying to duplicate a Yahoo! page in order to get your user name and password to hijack your account.

To help combat these phishing scams, we have installed what’s called a “sign-in seal” on our log-in page. Already in use by many financial institutions, a sign-in seal is a cookie-based secret message or image that is displayed on your computer(s) only. (That is, the machine(s) you use to log in to your account.) If you use more than one computer, you’ll need to set up your seal for each. You can create your own custom text message to use as a seal, or upload your own image.

If you do not see your custom seal—and you haven’t cleared your cookies on your browser—when signing into your account, the site you’re on may be a “spoof” site designed to hoodwink you into giving up your valuable personal information. We encourage you to create a customized sign-in seal for your Yahoo! Search Marketing account today, then look for it every time you log in. You can set up your seal from your Yahoo! Search marketing log-in page (the real one).

—The Team

Posted by Administrator

[ Categories: Announcements ]

17 Comments Add your own

1. Thursday Roundup 2/7/2008&hellip | February 8th, 2008 at 12:29 pm

[...] Protect Your Account From Phishing [...]
2. Advertiser | February 10th, 2008 at 9:29 am

How about providing an option to limit advertising only on the Yahoo search engine and prevent bogus clicks on your affiliate partners??
3. Killian | February 10th, 2008 at 3:54 pm

Everything is turning upside down. These days on the web there is everything but safety
4. Gimme.no » Yahoo! m&hellip | February 12th, 2008 at 1:28 am

[...] såkalt phishing. I kampen mot denne form for phising har Yahoo! derfor nå lansert noe de kaller “sign-in seal”. Already in use by many financial institutions, a sign-in seal is a cookie-based secret message or [...]
5. Darren Spencer | February 14th, 2008 at 9:19 am

Just goto the site yourself, avoid any email links and you’ll be safe! If the site has a message for you you will see it from the main site after you login.
6. Mark | February 14th, 2008 at 11:08 am

Cookie based security? Interesting. Since you brought up financical institutions, I find that the HBSC online banking system has a great ysstem to prevent ‘key-loggers’ from nabbing your key strokes. Some may consider it a deterrent but if you value safety, in addition to your password, you are also required to type in a secondary password on a virtual keyboard. Now if they randomized the keys, it would be even better.

Anyway, I think the cookie based image thing is a great option. My only concern is how easy it is to setup or is this an option only geeks will take advantage of.
7. Rosh | February 14th, 2008 at 11:48 am

I’m concerned. Is there a way to detect if the account has been “phished?”
8. Engineering Services - Elecrtical , Mechanical | February 14th, 2008 at 12:03 pm

I can see how these can fool some people however these phishing links are pretty easy to spot, just hover the mouse over the link and if the URL looks bogus for example may start with a number 212.23.4343 etc. Or if it just doesn’t “look” or “feel” right its probably a scam. Go to the yahoo search marketing homepage and log in thru there you will have all your important messages and what not.

It is good to see that companies are starting to take effective countermeasures to combat this.
9. Fred | February 14th, 2008 at 12:14 pm

Thanks for the tip!
10. Analysis | February 14th, 2008 at 3:56 pm

just 2 rules – do not open suspicious email – do not download suspicious programs…
11. Is Paul McCartney Dead? | February 15th, 2008 at 11:52 am

Always something to worry about. Got to be sharp on your toes
12. Geoff | February 16th, 2008 at 5:41 am

The warnings which sometimes appear with my browser I find are useful. A detection system to help prevent using phishing sites are a good thing.
13. SEO Company | February 19th, 2008 at 6:01 am

I didn’t know phishing could be so nasty. That sign-in seal is a really good idea!
14. Kevin | February 27th, 2008 at 8:32 pm

I have a proven idea to prevent phishing and address other internet safety aspect concern with user-mistakes. This idea is implemented in a small plugin for IE, and provided free at http://www.parentapproval.com.
15. ordersomabuyg | September 20th, 2008 at 5:02 pm

Wow Cool !
Super Man
Nice Site
16. Yahoo! Search Marketing B&hellip | August 21st, 2009 at 3:12 pm

[...] the sign-in seal that we offer for your account login. You can set a unique image to show up every time you log in. [...]
17. karthik | February 14th, 2010 at 5:51 am

sir , thanks for implementing this IDEA,my doubt is how it shows only to my system alone.

Some HTML allowed:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Trackback this post | Subscribe to the comments via RSS Feed