The companies will use Yahoo's Domain Keys technology to block e-mail messages that claim to come from eBay or PayPal but really originate elsewhere.
eBay, PayPal and Yahoo said on Thursday that they have begun collaborating to keep Yahoo Mail customers safe from phishing.
Phishers use forged e-mail messages that purport to come from brand name services like eBay or PayPal to dupe computer users into clicking on Web links that lead to phony Web sites. Unsuspecting consumers may then enter personal or account information and passwords under false pretenses. Phishers typically use this information for fraud or theft.
To prevent phishing messages from reaching users of Yahoo Mail, the companies are now using Yahoo's Domain Keys technology in the U.S. to block e-mail messages that claim to come from eBay or PayPal but really originate elsewhere. Yahoo expects to make the system available globally in the next few weeks.
Domain Keys was developed by Yahoo as a way to make sure that e-mail comes from where it says it comes from. In May, the Internet Engineering Task Force adopted the DomainKeys Identified Mail (DKIM), which incorporates Cisco's Identified Internet Mail system, specification as a Proposed Standard.
Dave Cullinane, chief information security officer at eBay, described the effort as a significant milestone in the effort to protect eBay and PayPal customers.
"[W]e hope today's news gets the attention of information security officers at some of the more obvious phishing targets so we can help protect even more consumers from the havoc these scams wreak," said Nick Dugan, blog editor for Yahoo's Yodel Anecdotal blog. "We're already actively working with many financial institutions, for example, and hope to continue the momentum."
In June, the Anti-Phishing Working Group, a consortium of organizations opposed to cyber crime, reported 31,709 unique phishing Web sites. About 95% of phishing attacks that month targeted financial services companies.
How Enterprises Are Attacking the IT Security EnterpriseTo learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Infographic: The State of DevOps in 2017Is DevOps helping organizations reduce costs and time-to-market for software releases? What's getting in the way of DevOps adoption? Find out in this InformationWeek and Interop ITX infographic on the state of DevOps in 2017.
Digital Transformation Myths & TruthsTransformation is on every IT organization's to-do list, but effectively transforming IT means a major shift in technology as well as business models and culture. In this IT Trend Report, we examine some of the misconceptions of digital transformation and look at steps you can take to succeed technically and culturally.