New Phishing Threat

Simple! Don't use on-line banking.

I have two personal accounts, three credit cards and three business accounts (all with the same bank) and I refuse to use on-line banking. What's wrong with going into your branch once a week or so?
 
Nothing wrong with online banking, what you need is common sense, when your bank says "We will never ask you for your details in an email" believe them and not the email asking for your details.

The 'problem' described in the above article has already pretty much been dealt with by browser upgrades.

The article was good for one thing though, the most corporate speak quote I've seen in ages "This attack is being weaponised out in the field."
 
I still have a chuckle when I get these emails telling me to verify my account details, especially when they come from banks I've never had any business with. Bottom line, ignore them all...
 
This isn't the usual junk email:

The DNS acts as the net's address system and helps computers translate the website names people use, such as bbc.co.uk, into the numerical equivalents preferred by machines.

If exploited the flaw would allow malicious hackers to direct people to fake sites even if that user typed in the correct address for the place they wanted to visit.
 
Wasn't this the problem that the patch sent out by MS the other week was due to fix, the patch that prevented Zone Alarm uses from accessing the 'net.

What is wrong with going to my branch every week or two ? Well the fact it is about 45 minutes drive away, in the middle of a town and almost impossible to find a parking place :)
 
I couldn't work without online banking. I begrudge the valuable time it takes going to the bank about four times a week to pay in cheques - but that is only about 5% of the transactions - the rest are dealt with online. It's just not feasible at a branch and I suspect it would take four times longer setting up payments via telephone banking than online. Time is money.
 
This isn't the usual junk email:

Totally. This is beyond the scope of the browser as it's a root issue in the interpretation of DNS. It may be a rehash of old vulnerabilities but the way they're used opens up a whole new issue.

In short your browser thinks it's getting the correct DNS resolution for www.barclays.co.uk and the site you visit looks like it should, but in reality it's not the bank but that scammers!
 
Back
Top