Kitchen Garden Forum

Bank customers who use online services are warned to be on their guard against fraudsters who can circumvent new security systems.

Despite the introduction of increased security measures such as HSBC's security key and other 'calculator-style' online banking devices, fraudsters are using "man in the browser" malware to target customers, the UK financial fraud authority said.

"People need to be aware and take appropriate steps," said Mark Bowerman of Financial Fraud UK. "These new security steps make it harder for fraudsters but this is still happening".

After logging in to the bank's real site, account holders are being tricked by the offer of training in a new "upgraded security system". Money is then moved out of the account but this is hidden from the user.

Martin Warwick, fraud expert at analytics provider FICO advised people to take steps to avoid this type of attack."Keep your antivirus software up to date, also consider using anti-spyware software and download the latest security updates for your browser and for your operating system," he said. "Always type the URL of the bank you bank with online, in the browser and don't use a link provided in an unsolicited email."

Yes, I read about that this morning and had always previously assumed that the random pin generating machines we use for online banking made the process very safe. I can't quite figure out how the hackers have managed to get round them but will now be very wary about online banking generally, even with up-to-date security protection software.

Apparently one of the means of possibly detecting if you've been caught is if your online banking process suddenly starts taking a lot longer than normal, but with varying internet speeds at different times of the day that could be a perfectly normal state of affairs.

You are right SMan if you bank or buy online you have to be vigilant all the time and every time for anything slightly suspicious.
We get the the usual few scam emails most days. I'm amazed that anyone is ever taken in by them. They are so crudely made - poor english, spelling mistakes and so on. You only have to hover over the link they give to see that they are very dodgy. The telephone scams are the same - the caller has a poor command of english, usually a thick accent that's hard to understand and their call number comes up as international or number unavailable. I suppose though if they keep trying one day they will eventually get lucky somewhere.

John

In my case "Take the appropriate steps" is not bothering with on-line banking. Easy Peasy. Cheers, Tony.

Primrose wrote:Yes, I read about that this morning and had always previously assumed that the random pin generating machines we use for online banking made the process very safe. I can't quite figure out how the hackers have managed to get round them but will now be very wary about online banking generally, even with up-to-date security protection software.......

Funnily enough the computer systems of at least one leading.security company manufacturing such devices was hacked into and the complex algorithms and "seed data" they start from to give the number you type stolen. In theory a clever, but naughty computer whiz could work out the number.


There is worse, the "insider threat", aka the poorly paid person trusted with your security information in a call centre or computer centre who could walk out with millions of peoples data on a memory stick.
Not always done for personal gain, how about "we'll torture & kill your family".

Can someone explain? I genuinely know nothing about on-line banking. What advantages does it have? My income goes into my bank, bills are paid almost entirely by direct debit. I only go to my bank to get cash - my wife doesn't even do that, as she is a late convert to the plastic card and, like our dear queen, never carries cash.

No on-line banking for us either. Don't trust it....don't want it.

You can do stuff yourself from home without talking to Poona.
Other than that b***** all else.

So far this week my Halifax, Co-op, Lloyds and Santander on-line accounts have all been have been suspended and Fedex needs a payment before it can deliver a parcel that I haven't ordered!!! When did I open all these accounts?

John

PS I do wish scammers would learn to write proper in English then they would can have more with success in there efforts!!

Oh I'm very glad they can't spell correctly or use proper English grammar because that's a dead giveaway that they're conmen! You'd think I was a multi-millionaire judging by all the bank accounts I'm alleged to have. It's just a pain through every morning and deleting them all.

Such a guarded secret is my current Email that I've only had one spam in two years and that was from Jason of KG Magazine!
JB.

alan refail wrote:Can someone explain? I genuinely know nothing about on-line banking. What advantages does it have? My income goes into my bank, bills are paid almost entirely by direct debit. I only go to my bank to get cash - my wife doesn't even do that, as she is a late convert to the plastic card and, like our dear queen, never carries cash.

You can move money from savings accounts to cheque accounts and vice bversa and you can also check that money that is supposed to have been paid into your account by a third party has actually arrived and you can also check that no strange withdrawals have occurred.

Years ago I went with my secretary, Suzie, to a lecture on hole-in-the-wall security problems. Having been told about so-called "phantom withdrawals" the time came for questions. Suzie put her hand up and with an air of total innocence asked "Can a phantom withdrawal result in a phantom pregnancy?"

JohnN. What was the reply.

I seem to remember it was a question from the speaker to me "Is she with you?" and my replying "Never seen her before in my life".
She had a great sense of humour. When I gave her a long, slim marrow and said "Here, you can do stuffed marrow a la Suzie", she regarded it with a thoughtful smile and replied "I think I'll do stuffed Suzie a la marrow!".