| International Domain Name Support Opens New Door for Phishers |
 |
 |
 |
| Written by Editor |
| Monday, 07 February 2005 13:55 |
|
Those nice people at the Shmoo Group have come along and developed some up to date proof of concept for subverting IDNs as discussed in their advisory. At the time of publishing most of the Mozilla browsers, Safari, Omniweb and Opera are vulnerable to spoofing using IDN. If your using a Mozilla based browser it is possible by disabling IDN support to prevent possible spoofing attacks. It shouldn’t be too long before the phishers pick up on this, so we are advising users to be very wary of links in emails. Remember most banks will NEVER email you to reset passwords, ask you to confirm details, etc., they will announce issues on their web site or send you a snail mail. If you suspect a potential attack, there are a couple of methods you can use to help determine if a URL is fake, you can copy the link and paste into notepad under Windows or some other similar tool on other operating systems, which would allow you to see the raw URL and view what character set the string is in. For SSL certs, if you view the details of the cert check the domain, if it is prefixed by the string xn- then the cert is for an IDN and you would be advised not to proceed. Add this page to your favorite Social Bookmarking websites          |
| Last Updated ( Thursday, 14 September 2006 23:19 ) |