Safepay Activated By Phishing Website?

Lulu65

Hello, I sincerely appreciate your help with this...

I was using Google Chrome and checking my email. I went to za.yahoo.com and the Safepay box popped up in the bottom right corner of the screen with:

Protect your online transactions with a secure environment. Start using Safepay?

Remember this option

Remember this option for all detected websites

Yes No

I thought that Safepay was asking me to update its settings so I clicked on "Remember this option for all detected websites" and then clicked on "Yes".

Safepay then launched in full screen mode and it seems that this website had activated it:

http://p.bankrate.com/yho/overnightaverages/?t=c

The freaky thing is that I wasn't even accessing this website from my internet browser so how could it have activated Safepay?

I'm concerned because my mother uses Safepay to do all her online banking. Is her safety compromised because of this phishing website?

I checked the Safepay settings after this incident and this phishing website was nowhere to be found.

Thank you for your time.

unknown

Hello,

It is true that you did not navigate to http://p.bankrate.com/yho/overnightaverages/?t=c. However, Yahoo displays advertorial banners/frames that may query for content from another domain such as shopping or online banking sites.

At the time you have entered za.yahoo.com, Yahoo had displayed content from bankrate.com which is flagged as a banking website in our cloud database. Bitdefender scanned the http traffic, detected this "indirect" navigation and triggered Safepay.

Also, bankrate.com is not a pshishing site, but a banking one. You and your family have nothing to worry about.

We suggest you to go to Safepay settings and choose Ask me every time. This way, you will be notified when Bitdefender detects traffic on banking websites and you can then choose if you want to open Safepay or not and if you want Safepay to remember your option in the future. If you press No without choosing a remember option or close the alert, that domain will not generate any alerts until you restart/shut-down your PC.

On our side, a solution not to trigger Safepay for content requested from another domain is under analysis.

Have a nice day!

Andrei