Google Blogoscoped

Forum

Say Goodbye to Paypal/eBay Phishing Emails in Gmail

Keith Chan [PersonRank 10]

Tuesday, July 8, 2008
15 years ago5,335 views

According to the Official Gmail Blog, the Gmail Team has taken one step further to protect its users from phishing attacks that claims themselves to be from the legitimate Paypal or eBay website.

"Now any email that claims to come from "paypal.com" or "ebay.com" (and their international versions) is authenticated by Gmail [using DomainKeys and DomainKeys Identified Mail (DKIM)] and [...] rejected if it fails to verify as actually coming from PayPal or eBay. [...] Gmail just won't accept it at all."

http://gmailblog.blogspot.com/2008/07/fighting-phishing-with-ebay-and-paypal.html

Tony Ruscoe [PersonRank 10]

15 years ago #

Nice feature. I don't know what's actually involved with implementing DKIM but shouldn't Google be doing this for all email sent from any @google.com (and maybe even @gmail.com) addresses too?

Daniel J. Doughty [PersonRank 1]

15 years ago #

Tony, this is Google refusing to accept mail from people who don't authenticate as paypal.com or ebay.com via an encrypted handshake of sorts. It requires the senders(ebay and paypal) to participate. In many cases, the people who send mail don't care to play around with this technology. So Google can't really do it for everyone until the senders participate.

TOMHTML [PersonRank 10]

15 years ago #

In relation with that: http://blogoscoped.com/forum/135334.html
I think you will received soon emails from @payppal.com, @pyapal, @paypall, @paypol, etc etc...

Tony Ruscoe [PersonRank 10]

15 years ago #

Daniel, I said they should do this for mail *from* @google.com addresses. For example, some phishers are currently trying to send fake AdWords phishing emails *from* spoofed @google.com addresses. This would stop those emails.

Keith Chan [PersonRank 10]

15 years ago #

[put at-character here] Tony: Agree!

Abhinav Singh [PersonRank 0]

15 years ago #

Nice post, well I recieved an email yesterday itself asking me to update my card information as it has been deactivated and finally realized its a phishing site.

Read more and see the screen shots of the same here:

http://abhinavsingh.com/blog/2008/07/fake-email-from-paypal-cloned-sites/

Forum home

Advertisement

 
Blog  |  Forum     more >> Archive | Feed | Google's blogs | About
Advertisement

 

This site unofficially covers Google™ and more with some rights reserved. Join our forum!