SSL security layer - new phishing tricks

Online information thieves are beginning to fake SSL (Secure Sockets Layer) security certificates to deceive Internet users.

Online scams have transformed in various ways from exploring browser vulnerabilities to penetrating and creating sites like legitimate web sites. Last year, network security research firm Netcraft discovered 450 attacks using fake https tricks.

More sophisticated, cybercriminals now exploit SSL certificates to buy domains that sound similar to the domain names of bank websites, allowing them to display SSL locking icons (often referred to as security guarantee).

Although security experts increase the risk of phishing and many browsers also display warnings, Netcraft says users often ignore those messages and continue to log data.

"The number of SSL-related phishing incidents will increase, so browser developers and security companies need to actively remind Internet users about SSL security certificates and warnings ," Netcraft said.