Computer users overeager to click popup 'OKs'

New research shows that most Web surfers are too eager to get rid of error messages that could be fake and potentially harmful.

Web surfers have a standard reaction to error messages that pop up in their Web browsers, according to new research published this week: They click "OK" and hope it will disappear.

Psychologists at North Carolina State University found that computer users have a hard time distinguishing between fake Windows warning messages and the real thing. In an experiment that tested the responses of 42 Web-browsing university students, they found that almost two-thirds of them -- 63 percent -- would click "OK" whenever they saw a popup warning, whether it was fake or not.

"Many people fall for this style of attack by not recognizing the visual elements that separate real and fake warning windows," the researchers concluded in a paper delivered at an academic conference in New York this week.

That's bad news, security experts say, because fake popup messages can take you to some very bad places on the Internet.

In the experiment, users tended to see the popup windows as an irritant that they needed to get rid of as quickly as possible, said Mike Wogalter, a psychology professor at North Carolina State who co-authored the study. "They really didn't think about it at all," he said.

Clicking on a fake popup window can take you to a Web site you may not have intended to visit, but there can be nastier results as well. In one well-known scam, victims are sent an e-mail with a link to a Web page that promises an interesting video clip. When they try to watch it, however, a popup message tells them they need to install special codec software to view the video.

In fact, the software is a Trojan downloader that then laces the victim's computer with malicious software such as keyloggers that track usernames and passwords.

To make matters worse, fake popups are increasingly found on legitimate Web sites, often delivered via online advertising networks, said Eric Howes, director of malware research with security vendor Sunbelt Software. "It's becoming a real problem because a few years ago, you would only see these fake popups on some of the seedier places on the Internet."

Harvard Assistant Professor Ben Edelman agrees that deceptive popups are a big problem. "These are widespread, particularly when you stop one notch below the very fanciest news sites," he said. "If you go to MySpace or if you just run Google searches and click on results, you're likely to stumble on such ads."

While it's easy to blame users for missing bogus error messages, Wogalter said software developers who have overwhelmed their users with too many warning messages should also share the blame. "They shouldn't be putting people into this sort of position," he said.

The North Carolina State researchers said that their subjects chose the best course of action -- clicking the red X "close window" button at the top right corner to close their fake popups -- just under a third of the time.

But Sunbelt's Howes said scammers are so clever these days that the "close window" buttons are often fake too. "You can get into this sort of Alice in Wonderland desktop where nothing responds like you think it should," he said.

Users who are really concerned about a popup message should close the window from the Windows taskbar at the bottom of the screen.

Or some may feel compelled to take more drastic action. "Sometimes the safest thing to do is to kill the entire browser," Howes said.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Robert McMillan

IDG News Service
Show Comments

Brand Post

PC World Evaluation Team Review - MSI GT75 TITAN

"I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it."

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?