Prevent being caught by Phishing

FireFox Phishing Warning

Phishing is one of those big words which came with the Internet.

What this big word means is that there are people who setup dummy web sites which look exactly like the bank’s web site. They then send you an email, pretending to be the bank, in which they ask you to confirm your login details. When you enter your details on the site they get hold of your login details, then log into your bank account and steal your money. They even do this with the SARS web site where they say you received a tax refund and they need your banking login details to pay the money to your account.

Personally I think the banks should be burned for the fact that the phishers  manage to steal your money because with the new law you are not supposed to be able to open a bank account without identification and proof of address. Before those people can steal your money they must set themselves up as a beneficiary in your account and transfer the money to their account. The bank can see to which account the money has been transferred, thus the banks are supposed to know who the criminals are.

Standard Bank launched software the other day which helps its users to identify phishing sites.

If you are using FireFox as your web browser you do not really need such software. FireFox now has a built in Phishing warning function, something the others like Microsoft  will soon copy. If you visit a phishing web site by mistake using FireFox you will get a huge red warning window. If you miss this you must be really dum. You can download and install FireFox for free at http://www.mozilla.com/ .

So switch to FireFox and help yourself to make the Internet a safer place.

The best way to prevent phishing attacks is to use your head;

  1. Remember the bank will NEVER ever send you an email and ask for your login details.
  2. Look at the URL of the site you are using, read my previous post at http://pietpetoors.com/blog/bank-fraud-over-the-internet/

If they still catch you with this age old trick it is your own fault, BUT I still feel that the banks should be held 100% responsible for all losses because the money gets transfered to another account and they must know who’s account it is.

FireFox Phishing Warning

14 Responses to “Prevent being caught by Phishing”

  1. Pieter says:

    Now that I loaded it to the site I see something funny. The mail says “Date and Time: 27/10/2010 at 09:am” but as i sit here behind the computer it is 27/10/2010 07h49, so it seems as if we are moving into the future here.

  2. Pieter says:

    Here is another good and new one I received from people targeting FNB. The golden rule remains, nether ever click a link in an email asking you to log into your bank account.

    Dear Customer,

    Richard Noman made an online funds transfer to your account online.
    Difficulties in verifying your account information.
    The details of this transaction is shown below:

    Date and Time: 27/10/2010 at 09:am
    Description: Payment
    Amount: R 5300.00

    View this transaction and your current balance, please click on the
    link below:

    Click Here To Current Balance.
    http:// firstnationupdate.x10.mx/ONLINEBANK.html

    1. And Log in to your F–N–B account.
    2. Best Regards,

    Colette Nugent.

    3. This e-mail has been sent to you by F–N–B Transfer Unit
    department

  3. Pieter says:

    Here’s another good one.
    The subject line is:
    Your FNB Account Statement Show R 560.99 Debit Order
    and the content is:

    Your FNB Account Statement Show R 560.99 Debit Order

    Attached to this e-mail is your encrypted FNB account Debit Order
    statement. Your Account statement is encrypted in order to comply with
    Debit Order requirements that invoices and statements sent
    electronically should be tamper proof and to stop the Debit Order
    process on your account CLICK HERE TO STOP *
    http:// fnbonlineaccountdebitorder .x10.mx/FNB.html *

    How to open your Stop and view Debit Order statement?
    In order to open and stop debit order deduction on your account
    statement you will need Adobe Reader installed on your computer.

    If you don’t have Adobe Reader installed on your computer, CLICK HERE
    * http:// fnbonlineaccountdebitorder .x10.mx/FNB.html* And download
    Adobe Reader .

    If you require any technical assistance, please call FNB Telephone
    Banking on 0860-11-22-44 or email info@fnb.co.za.

  4. Pieter says:

    If you click on the click here link it takes you to a web site which looks exactly as your bank’s web site. When you think that you are logging into the site using your login details, you are in fact sending your login details to the scamsters, they then use your details to steal your money. If you use FireFox as browser it will warn you most of the time when it is a fraudulent web site

  5. Pieter says:

    Yes, the bloke sent me about 34 payment during the past week,he must be bankrupt by now. Check the comments further down, I did post that email on here

  6. I got a payment notice today from Standard Bank from a James Du Plesis for R39 470.00

  7. Hanna says:

    Hi there,
    What happens if you go click on the “click here’ they have on these emails.

  8. Pieter says:

    Here is another version of the Standard Bank email, note how these scamsters use “security” as a way to lure you into entering your details.

    “As a token and Advancement into 2010, we hereby introduce you to our new more improved security measure called CRYPTOGRAPHIC PROTOCOL. STANDARD BANK is constantly striving to provide you with more convenience, control, and security to assist in managing your finances. As part of our ongoing efforts to make it easier and more secure for you to use our online services, we have upgraded the STANDARD BANK E-Sign Consent and Online Access that you reviewed and accepted when you began to use STANDARD BANK Online® Banking service(s). No additional action is required by you.

    to continue using your online services.

    You are advised to enroll your account to the new security measure by following the link below:
    Click here(link removed)

    Thank you for using Standard Bank “

  9. Pieter says:

    Here is another version of the Standard Bank Phishing scam emails:

    Dear Valued Member,

    Our recent security monitoring program indicate an invalid login attempts into you account online from an unknown IP address . In this regard, We need you to update your account information to our new security D-Y90 projection program for your online banking security.
    Please update your billing information today by Clicking Here After a few clicks,

    just verify the information you entered is correct.
    Sincerely,

    Standard Bank Services Team
    P.S. This message will be expire within 24 Hours .

  10. Pieter says:

    Here is another version:

    Dear StandardBank Client

    Our technical team are currently carrying out a planned software upgrade. This is just
    a modified check to ensure you are safe while banking online. We earnestly
    require you to visit our Secure Website to confirm your online bank account.

    Initiate the Upgrade Process

    If an accurate information is not supplied, we may suspend your account temporarily
    by limiting the access to some sensitive features until our review team validates
    its recent activities.

    You can also visit our Secure Website

    Please understand that this is a safety feature to keep you safe as
    we sincerely apologise for any inconvenience this may cause.

    Thank You

  11. Pieter says:

    Check out this one, it is also a good one. They use the phishing preventing software to lure the user into giving them their details.

    “Important security benefit:

    Online banking fraud is becoming more advanced, protect yourself now! We strongly recommend Rapport, Free online fraud protection software designed to protect you from this evolving threat. Standard Bank is offering our valued online customers the opportunity to enjoy the benefits of this comprehensive online security software.

    Takes only seconds to login to your online banking & install – no restart, never needs to be configured.

    https://www6 .encrypt. standardbank.co.za/ibsa/customer/rapport.exe
    (Note the link looks fine but the underlying link are fraudulent)

    Free and COMPULSORY for all Standard Bank online customers.

    Thank you for helping us protect your account.
    Sincerely,
    Standard Bank
    Security Advisor “

  12. Pieter says:

    Here is the latest one I received, this is actually a good one. It is amazing to see that they do not even bother too much to setup a false URL, think they catch enough people.
    The email reads:

    “Hello,
    James Du Plesis made an electronic funds transfer to your account. The details of this transaction are shown below.
    Amount: R39 470.00
    Description: PAYMENT
    Reference #: TL55
    To view the transaction, please click here
    If you have any questions related to this message or the funds transfer,
    please contact James Du Plesis.
    Please do not reply to this message as your message will not go anywhere.
    Sincerely,
    Standard Bank”

  13. Pieter says:

    Yes, I also get about 10 emails per day claiming to be from Standard Bank. It is interesting to see what these people try to get you to send them your details.

  14. bj steyn says:

    Hey Pieter, i have been receiving emails claiming to be from Standard Bank saying they have new security updates and i need to login. The funny thing is I dont even have a Standard Bank account. I also have been receiving emails that i have won this loterry and that loterry. One might just believe a once of email, but winning 20 different lotteries in 1 year. I must be the luckiest person on earth.

    Cheers
    bj

Leave a Reply

*

Dansette

Pieter's Blog is Stephen Fry proof thanks to caching by WP Super Cache