TravelMole
Tech

United strengthens login security for MileagePlus members

Friday, 12 August 20163 min read
United Airlines is beefing up security from today for MileagePlus frequent flier accounts.
Members will now be required to answer extra security questions to verify identity when accessing their accounts from a device the airline doesn’t recognize.
The multiple-choice questions will come from a drop-down list of possible responses to protect against key logging software often used by hackers.
Key logging spyware can record every key stroke made online and transmit to an unknown third party, which may then be used for fraudulent purposes.
"Based on our analysis we see this as a significant threat not just to our customers, but the internet in total," said Ben Vaughn, United’s director of IT security intelligence.
United’s two-factor authentication is the latest move to strengthen security protocols after a data breach last year by a group reportedly tied to the theft of security-clearance records from the U.S. Office of Personnel Management.
United has since rolled out its ‘bug bounty’ program offering ‘white hat’ hackers up to one million frequent flyer miles for identifying critical security bugs on its website and mobile apps.
The carrier this week awarded one million miles to a 19-year-old Olivier Beg who highlighted 20 security flaws in United’s systems.