[Home]   [Full version]  

New study highlights risk of fake popup warnings for Internet users

Sep 22 ,Technology


A new study by researchers at North Carolina State University shows that most Internet users are unable to distinguish genuine popup warnings messages from false ones – even after repeated mistakes. The fake ones were designed to trick users into downloading harmful software.

"This study demonstrates how easy it is to fool people on the Web," says study co-author Dr. Michael S. Wogalter, professor of psychology at NC State. The study examined the responses of undergraduate students to real and fake warning messages while they did a series of search tasks on a personal computer connected to the Internet. The real warning messages simulated local Windows operating system warnings, whereas fake messages were popup messages emanating from an exterior source via the Internet.

The physical differences between the real and the fake messages were subtle, and most participants did not discern them. Participants were fooled by the fake messages 63 percent of the time, hitting the "OK" button in the message box when it appeared on the screen despite being told that some of what they would be seeing would be false.

The ways people responded could potentially open them up to malevolent software, such as spyware or a computer virus, Wogalter says. Safer options, such as simply closing the message box, were infrequently chosen. The study was led by psychology graduate student David Sharek and co-authored by undergraduate Cameron Swofford.

Wogalter notes that companies and other credible entities may want to incorporate additional unique features into the real messages to allow people to differentiate between genuine warning messages and fake popups. However, he says, "I don't know if you could develop a legitimate message that could not be duplicated and used illegitimately."

Wogalter says the results of the study highlight the need to educate Internet users to be cautious. "Be suspicious when things pop up," Wogalter says. "Don't click OK – close the box instead."

Source: North Carolina State University

Related stories:

Criminalizing Web use
Surfing the Internet carries all sorts of minor hazards, including pop-up ads, vitriolic bloggers and time-wasting videos. As of last week, it also carries one that is anything but minor: the threat of criminal prosecution.
Woman convicted of lesser charges in cyber-bullying case
A federal jury here rejected three felony charges against Lori Drew but convicted the O'Fallon, Mo., mother on Wednesday of misdemeanors in a landmark Internet bullying case linked to the suicide her daughter's 13-year-old rival.
Facebook wins $873M judgment against spammer
(AP) -- Facebook has a won $873 million judgment against a Canadian man who bombarded the popular online hangout with sexually explicit "spam" messages.
Don't give in to ‘scareware'
Q. Recently my computer was attacked by a program named Antivirus XP 2008 that, while claiming to protect your computer, is actually a virus itself.
System thwarts Internet eavesdropping
The growth of shared Wi-Fi and other wireless computer networks has increased the risk of eavesdropping on Internet communications, but researchers at Carnegie Mellon University's School of Computer Science and College of Engineering have devised a low-cost system that can thwart these "Man-in-the-Middle" (MitM) attacks.
The Web: World Cup soccer spam hooligans
The stars are out on the playing field already -- even though the World Cup soccer matches haven't quite started. These are the midfielders and strikers of e-mail spam -- malicious messengers, and hooligan hackers -- who are hitting headers aimed at the nearly 1 billion people around the globe who will be desperate in the coming weeks for news and tidbits about their favorite players, whether it's Francesco Totti in Italy or Tomasz Kuszczak in Poland, sources tell UPI's The Web.
The Web: Death, taxes and Internet spam
Receiving a lot of e-mail spam lately? If you're like most Americans, the answer is probably a categorical "yes." Blame it on the Internal Revenue Service. Income tax return filing time is approaching for most individuals, and the spammers are inundating the Internet with fake offers of "instant refunds" for taxpayers. Now, not only death and taxes are assured for all. Death, taxes, and Internet tax spam are all now metaphysical realities, experts are telling United Press International's The Web.
China to hasten telecom regulation
In a bid to curb rampant spam and growing fraud conducted over mobile services, China will speed up creation of a new telecom law this year that will insist on all mobile-phone subscribers to register using their real names.

News discussion:

Technology news

[Home]   [Full version]