Google, Microsoft, and Yahoo are among the members of a new technical working group aimed at stopping phishing attacks. A new authentication scheme is being submitted to international standards groups.