Article Noodle

Tabnabbing is a new phishing scam created by some clever identity thieves. It's also known as tabnapping, a combination of tab and kidnapping, but either way it's a serious problem that could affect anyone.

How It Works

While you're surfing the Web you probably have several tabs open. You open one page and move on to another. When you return to a page, you see a login screen. Maybe it's for an email account, social networking site or even your bank. Problem is, it's not real.

Scam artists have developed a program that changes a page while you're not looking at it. The inactive tab will morph into something that looks exactly like the login page of a site you probably use. Since you have several tabs open, you assume that you were using the site and your session timed out. You log back in.

Just like that the scammers have your information. Just think about what they can get from your email: bank account numbers, passwords and who knows what else. Your identity has just been stolen.

How Can This Happen?

Before tabnabbing can occur, the scammers must get access to your computer. It could come from a Flash Widget or a third-party script. Be careful what you download and where you surf.

Did you know your browser can warn you about potentially harmful sites that may contain dangerous scripts? Check your browser settings. In most cases you'll be able to change the settings to warn you about suspected fraud or attack sites by clicking the Tools link, then Settings or Options and updating your Security preferences.

Be Careful Where You Log In

Tabnabbing is a form of phishing that could fool even the savviest among us. So how can you avoid becoming a victim? Never, ever log in to any account unless you have just entered the URL yourself. Even if you were logged in and your session timed out, enter the URL again and start over. Prevention is the ultimate tool.

Double check the URL of any site before you log in. Clever criminals create URLs that look very similar to the real thing, so make sure you are always on the right page. If the URL doesn't look right, close the window immediately.

What If I've Been Tabnabbed?

If you think you may have been tabnabbed, go to your real account immediately. Log in and change your account information. You may be able to update your account before the thief has a chance to get in.

You might need to contact your bank, credit card company or other service providers to inform them of the possibility of identity theft. Don't take chances. Tabnabbers are playing for keeps.

Want An Example

Aza Raskin, who works for Mozilla, created an example to show people how tabnabbing works. Visit his blog, open another window, wait a moment or two and return. Suddenly the page looks like Gmail. Raskin made it obvious that the page is fake; phishers won't be so considerate.

Be careful out there, identity thieves can be ingenious. Protect your personal and financial information at all times, and watch out for these clever new scams.

Resource: The PeopleFinders People Search Blog
http://blog.peoplefinders.com