'Tab napping' - a new online scam Please be careful
 
 

       The Horse Forum > Life Beyond Horses > Technology

'Tab napping' - a new online scam Please be careful

This is a discussion on 'Tab napping' - a new online scam Please be careful within the Technology forums, part of the Life Beyond Horses category
  • Url tab scam
  • Secure tabs scam

 
LinkBack Thread Tools
    06-09-2010, 09:46 AM
  #1
Yearling
'Tab napping' - a new online scam Please be careful

What is Tab napping?

Tab napping is essentially a new kind of phishing scam. Until now phishing has involved sending hoax emails in an attempt to steal your usernames, passwords and bank details. Often the sender will claim to be from your bank and will ask you to verify your bank details by clicking on a link contained in the email.
The link actually directs you to a fake website which looks just like your bank's own website. Once you have typed in your login details they can be accessed by the criminals who set the fake site up.
But weíre beginning to wise up to phishing attacks like this, and many of us know we should be very wary of clicking URLs even if they appear to be in a legitimate email.
With awareness of phishing on the up, making it more difficult for scammers to succeed, tab napping could be the scam to watch out for next.

How does tab napping work?

Tab napping is more sophisticated than the phishing scams weíve seen so far, and it no longer relies on persuading you to click on a dodgy link. Instead it targets internet users who open lots of tabs on their browser at the same time (for example, by pressing CTRL + T).
How does it work? By replacing an inactive browser tab with a fake page set up specifically to obtain your personal data - without you even realising it has happened.
Believe it or not, fraudsters can actually detect when a tab has been left inactive for a while, and spy on your browser history to find out which websites you regularly visit, and therefore which pages to fake.
So don't assume that after you have opened a new tab and visited a web page, that web page will stay the same even if you donít return to it for a time while you use other windows and tabs. Malicious code can replace the web page you opened with a fake version which looks virtually identical to the legitimate page you originally visited.

How might tab napping work in practice?

Imagine you open the login page for your online bank account, but then you open a new tab to visit another website for a few minutes, leaving the first tab unattended. When you return to your bankís site the login page looks exactly how you left it. What you havenít realised is that a fake page has taken its place, so when you type in your username and password, you have inadvertently given the fraudster easy access to your account.
Even if you have already logged into your bank account before opening another tab, when you return you might find youíre being asked to login again. This may not necessarily rouse any suspicion since you might simply assume your bank has logged you out because you left your account inactive for too long. You probably wonít even think twice before logging in for a second time. But this time round you have accidently inputted your security details into a fraudsterís fake page which have been sent back to their server.
Once you have done so, you can then be easily redirected to your bankís genuine website since you never actually logged out in the first place, giving you the impression that all is well.

How can you protect yourself against tab napping?

This is pretty scary stuff but thankfully tab napping should be relatively easy to avoid. Here are five simple ways you can prevent yourself from falling victim:
Make sure you always check the URL in the browser address page is correct before you enter any login details. A fake tabbed page will have a different URL to the website you think youíre using.
Always check the URL has a secure https:// address even if you donít have tabs open on the browser.
If the URL looks suspicious in any way, close the tab and reopen it by entering the correct URL again.
Avoid leaving tabs open which require you to type in secure login details. Don't open any tabs while doing online banking - open new windows instead (CTL + N).
Finally, take a look at online banking: How to stay safe to find out other ways to protect you from online scams.

Source: 'Tab napping' - a new online scam | Yahoo! Finance
Happy Browsing and keep safe!
Regards
     
Sponsored Links
Advertisement
 
    06-09-2010, 04:44 PM
  #2
Super Moderator
Thanks for sharing this. Haven't heard of that before.

I admit I'm perhaps a bit delusional but I don't have online bank accounts just because of things like that. I know I'm not that computer-wise but still the most skilled person to keep computers going & updated in our family and it'd be all possible that I'd have some malware without me even recognizing it or that something like tab napping happened to me. Of course there are some computers for client use at bank buildings too but if I have to go there anyways, I can just use some of older type automatics or visit a bank clerk and let they use their computers and systems which, I guess, are a way better protected than my home laptop with just a basic anti-virus system.

Still more delusional, I also avoid handling my very sensitive details like a social security number with my computer. If I for example have to deal with some institution which needs that number and I fill their form offered on web, I just print the form after filling not so sensitive info with computer and add the most vulnerable details writing them by hands afterward.

*wearing a foil hat while waiting UFOs' landing* .
     
    06-09-2010, 04:51 PM
  #3
Yearling
Thanks! I've always said that it won't be long before the internet will be completely inaccessible/unsafe. This is one major step towards that day.
     

Thread Tools

Similar Threads
Thread Thread Starter Forum Replies Last Post
You Have To Be SO Careful! writer23 Horse Health 12 05-14-2010 07:03 AM
Gracie working, napping, and sedated. =P riccil0ve Horse Pictures 5 03-09-2010 11:59 PM
Napping. Oh joy unbounded! Smarby Horse Training 32 12-04-2009 11:09 AM
Be Careful What You Wish For FoxRidgeRanch General Off Topic Discussion 2 04-06-2009 01:02 PM
Napping and rearing madmagic Horse Training 5 03-04-2009 05:26 PM



All times are GMT -4. The time now is 10:04 PM.


Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.6.0