anti-phishing toolbars

Are there any good ones out there and can anyone give a good recommendation?

 

Hi benton4,

I use netcraft on Firefox and IE: http://toolbar.netcraft.com

-- Tom

 

ScamBlocker.
http://www.earthlink.net/software/free/toolbar/
Easy to use, and doesn't slow anything - System or browsing. It was the first anti-phising protection. Not saying it's the best, but it's free and i've tested it on a few known phishing sites and it worked fine.

But one thing i'd really like to see is an Anti-Phishing application test. Dunno if there has been one, but would be very useful.

muf

 

Hi, here's another but I have not used it, perhaps someone out there has some experience of it.

http://www.spoofstick.com/

Gordon

 

Also, check out Fraudeliminator:

http://www.fraudeliminator.com/started.php

 

I agree with G1111 fraud eliminator is a good one and also IPGuardian http://www.soft-trek.com.au/prjIpGuardian.asp .

Thanks,

Chris

 

Of those already listed , I STRONGLY suggest the use Of SpoofStick from CoreStreet . Fraud Eliminator is pretty good as well . You want one with a VERY high # of fraudulent sites in their database . Hence , SpoofStick .

Good luck

 

Uhm, SpoofStick doesn't have a database of sites.. it just tells you what site you're really on so you don't get duped into thinking you're somewhere else. It's a great program, but it doesn't give you any kind of rating like FraudEliminator or NetCraft.

I've used SpoofStick for some time now. I'm checking out FraudEliminator right now (thanks!), and it's looking pretty nice I might use both, though, as not depending on a database is a big plus in my book.

 

safe computing web site has one it works but slowws your computer

 

IPGuardian will also stores an encrypted database of passwords and logins and when you goto a site that requires this will automatically fill them in to where keyloggers can't detect them. Also shows when you are an actual secure site like banking and such. Hope you don't mind the listing of features.

Oh yea. Also can be run from a usb stick or floppy or whatever.

Thanks,

Chris

 

Notok . Thanks
I believe you are mistaken . So I am clear about this , database may not be a good choice of words . To me , it is . There are KNOWN sites that link you elsewhere AND there are sites that are detected by their actions . Also known as heuristics . SpoofStick has a high # of knowns . Their database IS up to date and IS large . I do not push any of these on anyone . I personally like Fraud Eliminator AND SpoofStick . I have tried the others and found them to lack the intelligence of the two I like .
Bottom line is , both of those IN MY OPINION , are better than the others mentioned .

 

Thanks for the information folks. But I have one question. Does anyone actually use both Fraud Eliminator AND SpoofStick together? Cheers Chew

 

Thanks for all the input. Fraudeliminator caused my FF browser to crash-not sure why. Currently I'm trying the Trustwatch toolbar.Don't notice any slowdowns yet.

 

For Chew :
Do not know that both will run at the same time . Guess they could . Sorry . I am rambling tonight . I have never run both at the same time .
Good luck . it will be interesting to see if it is done . AND what the consequences may be !

 

hollywoodpc I am only using SpoofStick at the moment but I am keeping an open mind as to what I can install on Firefox. I guess anything that is listed on Firefox Extension website is rather straightforward and easy to use. Not sure about others though. Chew

 

I don't suppose you have any source for that? I'm not seeing anything like that, and I've never seen that kind of behavior with SpoofStick.. it just tells you the actual server that you are visiting, that's pretty much it.

Just a word of warning about FraudEliminator, I went to uninstall it because it wasn't working, when I did it tried to open about 100 IE windows (literally) until it, and other programs, started crashing. Yikes, if that's a bug, it seriously needs fixing. My CPU usage is still at 100% from my security software trying to catch up.

 

Thanks for the warning Notok. I only install something that will not crash my system. If the program will mess up my system I will not even touch it with a pole coz I just don't want the hassle. I make sure I do some research before I install. SpoofStick is simple and good enough for me so far but I guess it is better than nothing and do not crash my system. Cheers Chew P/s: SpoofStick it is for the moment for me that is.

 

Hey Notok .
I sent an email to them awhile back . Their response was something to the effect of , because it is connected to the internet , it automatically draws from the database without the need for updates . As for any credible info ? No , I have none to give as it is mute to me anyway . I know what it does and how it does it . I am not trying to make people use the product . It makes no difference to me . I must say that I believe MOST , if not all of these types of programs , have a database . They cannot all simply rely on heuristics . That is an assumption but , it is my guess .
Anyway , good luck on whatever you use . I never had the problem you experienced with FE . But , SpoofStick is excellent , regardless of how you think it works .
Cheers

 

At this point I think people will probably just be very confused about how it works, and I don't want people downloading it thinking it will give you an alert if you land on a phishing site, because it won't. From the website:

There's no heuristics or database to it, it simply shows you the actual site you're on so that you don't get fooled into thinking you're on eBay (for example) when you're really on a scammers site, even if they've used some vulnerability (like the IDN spoof) to make your browser show ebay.com (when you're really at scammer.com). When what SpoofStick shows is different than what the address bar shows, you know something is "phishy"

I'm not trying to pick on you here, hollywood, but I don't want people here confused, downloading it thinking it's an "intelligent" solution that they don't have to pay attention to until it alerts them, because it doesn't work that way. As with any security software, you have to know it's limits and how it works for it to be effective.

--

It looks like FraudEliminator is a no-go for me, but NetCraft is working beautifully.

 

I have had no problems with FraudEliminator so far. I have uninstalled and reinstalled it a few times with no problems. I had Netcraft Toolbar but it would occasionally freeze my system calling home to check for updates. FE calls home for updates and I allow it. I was concerned at first that it is fairly new and might be spyware itself, but it has gotten okay reviews and I haven't found anything bad about it so far. They have a paid version that is suppose to give quicker updates. I found no reason to go with the paid version. I use SpoofStick with Firefox, but can't get it to work with IE6. My experience is that they all can be fooled and you should be alert as they (toolbars) aren't the ultimate solution to anti-phishing, just another tool.

 

While I agree there are no heuristics or database contained in SpoofStick....there are some warning alerts that will be presented in the case of a URL address spoof.

www.wilderssecurity.com@google.com

 

Notok,

I emailed you reguarding Fraud Eliminator as to not hijack this thread.

Thanks,

Chris

 

Just goes to show that things can act differently on different people's computers, I guess Just to be clear, I'm not recommending that anyone stay away, but just be aware that things can go wrong. I wouldn't have thought that a browser extension could have done that much! It's all ok now, though. I've just uninstalled the the extension from FF, but will leave it installed on the system.

Nice, hadn't seen that one before.. thanks

And replied

 

One to look out for. Deepnet AntiPhishing, Uses behaviour detection only. Coming soon for IE and FF.
http://www.deepnettechnologies.com/products/dap.asp

muf

 

Firetrust makes one as well..
http://www.firetrust.com/firetrustsitehound.html

Although it's not a toolbar, Online Armor also has some good anti-phishing features, including DNS verification (which I haven't seen elsewhere).