Cybercriminals are good at swindling you into thinking they are trustworthy companies just trying to help you out. Don’t be fooled, there are ways to tell weather or not the emails and phone calls are fake.
Hesperbot a new Trojan that has been detected by ESET, uses high-tech mechanisms to bypass the banking security systems. This is canny social engineering trick for victims to fall for the scam.
Here are some tips to use when distinguishing between the behavior of a banking thief and the real institution:
http://www.hyphenet.com/blog/spot-banking-cyber-criminals/
Never confirm anything through a text message
Banks will send you a text, informing you that your account has changed. Do not believe this! Banks will not ask you to confirm anything through a text message. Do not ever click on links or put in passwords from a text message you may receive from a bank.
http://www.hyphenet.com/blog/spot-banking-cyber-criminals/
Don’t believe any deadline threats
Banks will let you know if something is “urgent” with suspicion of fraud pertaining to matters regarding your funds. Banks will not ever send you a message threatening a deadline about your account shutting down. Cybercriminals are always in a rush to get you to fall for their scam. Their websites are often flagged or blocked pretty quickly so the faster you respond to their “urgent” message, the better for them.
http://www.hyphenet.com/blog/spot-banking-cyber-criminals/
Don’t trust links about a “new version” of your banking app
There are noted attempts of fraudulent instillation on your phone with a new app for your banking system. The malicious apps are trying to bypass security systems to get into your bank accounts. You can call your bank to double check on the upgrade, or go to their website. These apps are now being analyzed.
http://www.hyphenet.com/blog/spot-banking-cyber-criminals/
Watch out for shortened URLs in an email
Cybercriminals can use shortened URLs to trick people into clicking onto a fraudulent website. URL-shortening deceives users into clicking a link without ever knowing where it will take you. You may have seen shortened URLs from twitter and YouTube, but your bank will not use them.
http://www.hyphenet.com/blog/spot-banking-cyber-criminals/
Don’t trust couriers to pick up your “faulty” bank card
Courier scams are starting to become a problem with bank fraud. The “bank” will call you telling you a courier will arrive to collect a faulty bank card. A courier then arrives at your home asking for your bank card because it is “faulty” then proceed to give you a new bank card that is safe to use. Do not fall for this. And don’t let them in your house. If your card is indeed faulty, the bank will instruct you to destroy it. Never hand your bank card over to anyone.
http://www.hyphenet.com/blog/spot-banking-cyber-criminals/
Watch out for phone calls for you to “prove” your identity
A new scam is a phone call from either “the police” or “your bank”, telling you they have found fraudulent transactions on your card. The criminals will ask you to prove your identity by calling a real bank number. The trick is, when you hang up the criminals are still on the phone with a fake dial tone, then they ask you to enter your passwords and you just gave your account into away.
http://www.hyphenet.com/blog/spot-banking-cyber-criminals/
Don’t believe new email addresses
Be wise to receiving an email to your work email or any other address letting you know they are contacting you this way because it is a work day and they are more likely to get a hold of you. Banks will not add another email address on their own. The email address you give them should be the only one in their system.
http://www.hyphenet.com/blog/spot-banking-cyber-criminals/
Check to make sure the web page is secure
If you are on a real banking website, there should be a symbol in your browser’s address bar. This shows you it is secure with a lock padlock or unbroken key symbol. If there is no symbol in the browser, be wary, the page may not be real.
http://www.hyphenet.com/blog/spot-banking-cyber-criminals/
Banks should always use your name
If you receive an email addressing you as “Dear Customer” or “youremail@yahoo.com”, go no further. Banks will always use your name and even include the last four of your social or account number. Any emails addressed to anything friendly sounding but your name is often spam.
http://www.hyphenet.com/blog/spot-banking-cyber-criminals/
Don’t give up your personal information
When a bank gets a hold of you in suspicion of fraud, they will ask you to verify personal information. Usually your phone pin number is asked for you to use, not your debit card pin. Never give up any personal information like your mother’s maiden name or the name of your first pet. Scammers use this to hack into other accounts of yours.
You can find a list of detailed phishing scams from ESET here.
Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet, “Like” us on Facebook or add us to your circle on Google+
References:
A scam-spotters guide: Ten things your bank will NEVER do – but cybercriminals will – We Live Security
http://www.welivesecurity.com/2013/09/12/a-scam-spotters-guide-ten-things-your-bank-will-never-do-but-cybercriminals-will/
No comments:
Post a Comment