News

[PSUs]

Friday 31st March 2006

Bank domain names overdrawn - F-Secure 3:25PM, Friday 31st March 2006

Computer security firm F-Secure has done an survey into the number of bank names that have been registered as Internet domains, but not by the banks themselves.

A simple search across the .com, .net, .org, .us, .biz and .info top-level domains for common bank names found a huge number of illegitimate sites, including 994 mimicking Lloyds and 1,158 posing as HSBC. Sites bearing the name of US bank Chase totalled 6,470.

None, however, are as popular with phishers as the name of auction site eBay, which occurred 8,057 times in F-Secure's search.

While it accepts that some of these may be legitimate, the company rightly questions domains such as citibank-account-updating.com, registered last Friday to Evelyn Musa in Arlington, Virginia. It also wonders why such illegitimate registrations are permitted.

'When someone in, say, Nigeria wants to register a domain name that starts with the name of a well known bank, why are the registrars so willing to let them register it?' it asks.

Simon Aughton

Submit to: Digg | Slashdot | Del.icio.us | Technorati