Trusted search software labels fraud site as "safe"


Digital certificate firm GeoTrusts launch of a search engine with built in trust features this week has been marred by the classification of a phishing site as genuine. Powered by Ask Jeeves, GeoTrust TrustWatch search aims to protect users against fraudulent behaviour and phishing attacks by giving web sites a verification rating. Its a laudable aim, but the classification of a recently created phishing site as "verified as safe" raises serious doubts about the effectiveness of the technology. Such incorrect classifications create a false sense of security that can only play into the hands of would-be fraudsters.

The bogus site purports to represent the Metropolitan Credit Union. Its a crude facsimile of the real site, but TrustWatch assigns the dodgy site a trusted status. Netcraft doesnt score much better in assigning the same ropy site with a risk rating of only "one", a single notch above trusted. - Channel Register

Linked by shanmuga Tuesday, 27th September 2005 10:14PM