Click to return to BOL home page
 


MAIN CONTENT 
Compliance

    Agency Road Maps

    Alphabet Soup

    Compliance Tools

    FACTA/FCRA

    OFAC

Lending

    Article 9

    FACTA/FCRA

    HMDA Heaven

    Lending Tools

    SCRA

Marketing

Operations

    Check 21

    Disaster Updates

    Disaster Recovery

    HR Corner

    IRA Season

    Money Matters

    Operations Tools

    SARResearchGuide

Security

    AML/BSA

    Bank Robbery

    Counterfeits

    ID Fraud/Phishing

    Security Tools

Technology/eBanking

    Disaster Updates

    Disaster Recovery

    Info Security


SPECIAL AREAS 
BOL Archives

BOL Blogs

Briefing Archive

Calendar

Court Watch

Disaster Issuances

Em@il Education

Examiner's Corner

Executive Briefing

Infovault

Launch Pad

Lessons Learned

Monthly Roundup

Risk Management

Site Map

Site Orientation

Top Stories


~ ~ ~
SERVICES 
Background Check
BOL Conferencing

CrimeDex

Em@il Education

ID Verification

Record Retention


~ ~ ~
SHOP 

Banker Store

Bankers Info Ntwk
Books
Vendor Connect

CONNECT 

Career Connect

Learning Connect

Vendor Connect

Guru Central

INTERACT 

Ask a Guru
Bankers Threads

Contact Us

Give Us Feedback


TOOLS 

60 Second Solutions

Alphabet Soup

Banker Tools

BOL Forms

FUN 

Banker Humor

Banker Memories

BOL Recipes

eCard Exchange

LEARN MORE 

About Advertising
About Our Sponsors
About Us


Print Friendly! Email This Article! Discuss NOW!


Phishing Grows Up ... Into an Ugly Monster

The frequently-reported phishing schemes that already have us shaking in our boots have evolved and become sophisticated enough to get a new name: pharming.

That's the term security companies and others that follow Internet trends have given a complicated form of phishing that goes beyond the single e-mail attempt to lure people to a false site. Pharming actually installs malware (translated: malicious software whose sole purpose is to reside on a machine until it can be used to extract personal and financial data from that computer).

When activated (which is usually through a seemingly innocent action such as typing in a legitimate address), the malware pops up bogus sign-on pages. It does so by translating a legitimate address into the illegitimate address, an action undetected by the user. The malware then intercepts account name and number entries, and sends the information to scammers. As if that weren't enough to worry about, the schemes have become increasingly complex in their URL redirection techniques to better disguise from law enforcement where links inside e-mails go.

Among the safeguards security firms recommend that banks can pass onto customers are:
  • Install and keep up-to-date with anti-virus, anti-spam, and anti-spyware and install the latest operating updates on computers. If the malicious e-mail doesn't arrive in the first place, it can't trick you.
  • Be careful with any e-mail attachments. Many malware infections are disguised to look like jokes, graphic files or security patches.
  • If you receive an e-mail that looks like it came from a legitimate company, don't click on the link. Instead, type the actual Web address in your browser.
  • Look for security icons and be aware that secured web sites usually begin with https:// instead of just http://
  • Never fill out forms in an e-mail. Instead, visit the company's legitimate site.
Copyright © 2005 Bankers' Hotline. Originally appeared in Bankers' Hotline, Vol. 15, No. 4, 5/05




Print Friendly! Email This Article! Discuss NOW!


[an error occurred while processing this directive]