I work for an online stock broker. I'm in the tech support department answering client questions on their browser settings and general questions on internet security.
I can't count the number of times that I've had people call in with $500,000+ accounts that do the following:
1) open up browser of choice
2) in the search bar of whatever endless amount of spyware search bars they have installed on their PC they type in the name of my employer and hit search
3) they click on whatever link comes up
4) they type in their username and password
5) they can't get into their account
6) they call me
7) I trouble shoot and they aren't even signing into our site...it's a seperate one that we operate that uses different login information
It sounds fairly benign, but in reality what's to stop people from setting up phish sites that snipe search requests to my companies domain with an identical looking login page that is there to harvest usernames/passwords.
It just completely dumbfounds me that people are so lazy/careless/ignorant/whatever that instead of going to the address bar and typing www.myemployer.com they go to a search bar and type in "myemployer" and click on whatever comes up.
You really need to be able to pass some kind of online IQ test before you are allowed to use online services that can have serious repercussions on your financial well being.
I can't count the number of times that I've had people call in with $500,000+ accounts that do the following:
1) open up browser of choice
2) in the search bar of whatever endless amount of spyware search bars they have installed on their PC they type in the name of my employer and hit search
3) they click on whatever link comes up
4) they type in their username and password
5) they can't get into their account
6) they call me
7) I trouble shoot and they aren't even signing into our site...it's a seperate one that we operate that uses different login information
It sounds fairly benign, but in reality what's to stop people from setting up phish sites that snipe search requests to my companies domain with an identical looking login page that is there to harvest usernames/passwords.
It just completely dumbfounds me that people are so lazy/careless/ignorant/whatever that instead of going to the address bar and typing www.myemployer.com they go to a search bar and type in "myemployer" and click on whatever comes up.
You really need to be able to pass some kind of online IQ test before you are allowed to use online services that can have serious repercussions on your financial well being.