Absa responds to SIM swap scam

siraman said:
:cry: The "From" on it's own is a dead give away that all is not kosher. Never mind people's ignorance isn't it time banks are compelled to educate all new internet banking subscribers on the basics of online fraud and prevention(I understand I'm being drastic here).
Click to expand...

Good luck with that. Once did a mail shot, informing people in my prev co, that no one will ever ask them for their password....

25+ replied with their passwords, including the CEO.
 
AlphaJohn said:
True, but they use lame ones now cause they work.... wait till they start getting real sly.

For example, Send a Joke mail with a page link to install the a trojan on your PC, while displaying some jokes page.
Next time you log in to bank Trojan kicks off saying you need to install some added security feature to continue using your banking. In doing this you just install the real MIN trojan + Zitmo.

After that bob's your uncle....
Click to expand...

Perhaps this solution for those tech savvy enough?http://krebsonsecurity.com/2012/07/banking-on-a-live-cd/

The simplest, most cost-effective answer I know of? Don’t use Microsoft Windows when accessing your bank account online. All of the malware used in the attacks I’ve written about is built for Windows. That’s not to say bad guys behind these online heists won’t get around to targeting Mac OS X, or users of other operating systems. Right now, there are no indications that they are doing this.
Click to expand...
 
AlphaJohn said:
Good luck with that. Once did a mail shot, informing people in my prev co, that no one will ever ask them for their password....

25+ replied with their passwords, including the CEO.
Click to expand...

LOL.Right here and then I give up.
 
BREAKING NEWS!!!:D

Just stopped an excited colleague from accessing an email from SARS purporting that she's due for a refund. Problem? She's never even registered for E-Filling.
 
Lol! that's the trouble... greed. We all want that cash.
 
At around 18:30 today a lady from Rondebosch phoned into the 702 money show.

R1,5 million taken from her home loan account. MTN client and ABSA client... ;)
 
supersunbird said:
At around 18:30 today a lady from Rondebosch phoned into the 702 money show.

R1,5 million taken from her home loan account. MTN client and ABSA client... ;)
Click to expand...

Wow that is insane! HTF does such a huge sum get moved without proper verification...? Wow......
 
Phishing, it's like giving your house keys away and then claiming for losses from your security company. Security, like everything else is a dual responsibility. You play your part (dont click on links) and banks play theirs (implement controls that balance accessibility with security).

If you can't handle that, carry cash around...uhm....much safer
 
supersunbird said:
At around 18:30 today a lady from Rondebosch phoned into the 702 money show.

R1,5 million taken from her home loan account. MTN client and ABSA client... ;)
Click to expand...

I'm guessing this lady didn't do massively transactional stuff on her bond, if so then even the most basic of fraud detection systems should have flagged this as suspect and stopped it immediately.
 
Shellyb1 said:
Phishing, it's like giving your house keys away and then claiming for losses from your security company. Security, like everything else is a dual responsibility. You play your part (dont click on links) and banks play theirs (implement controls that balance accessibility with security).

If you can't handle that, carry cash around...uhm....much safer
Click to expand...

So if I as your friend send you an email, will you click on a link in the email?
 
Its is my opinion that while there could be some phishing going on, that social engineering might enable the fraudsters to get into bank accounts (due to them having all the RICA and credit application details).
 
ToxicBunny said:
So if I as your friend send you an email, will you click on a link in the email?
Click to expand...

Sorry, should have spelt it out.....Don't click on links in emails from banks where the link takes you to a website that is not your bank but looks like your bank.

You may click on links from your friends except where your friends are phishers.
 
supersunbird said:
Its is my opinion that while there could be some phishing going on, that social engineering might enable the fraudsters to get into bank accounts (due to them having all the RICA and credit application details).
Click to expand...

You don't even need that much "social engineering" to get those details anymore.

I applied for finance a few weeks ago, the amount of information that I had to give was incredible, and I know it passed through at least 4 different hands before it got anywhere near the bank itself. You just have to have someone in that chain who is handing out the info (enough to go and change details in a bank if necessary) and your account details are no longer secure.
 
Shellyb1 said:
Sorry, should have spelt it out.....Don't click on links in emails from banks where the link takes you to a website that is not your bank but looks like your bank.

You may click on links from your friends except where your friends are phishers.
Click to expand...

Ok, I as your friend have gotten my PC infected with a trojan from some or other source, this trojan sends out an email to everyone in the friends contact list, that contains a url.
You will click on the link, and it will install a trojan on your system that will capture your bank details the next time you log in to your bank.

See the problem?
 
Zenbaas said:
Some people just want to place all the blame on the consumer no matter what...
Click to expand...

If I was able to get the information from the banks, I would hit and run....take as much as I can as quickly as I can. These are the consumers that are giving their creds away, not the banks.

Simple rule...
Keep your limits low, all banks have payment and cash withdrawal limits. Don't be brave and have R1m limit when you only use R10k pm.
 
Shellyb1 said:
If I was able to get the information from the banks, I would hit and run....take as much as I can as quickly as I can. These are the consumers that are giving their creds away, not the banks.

Simple rule...
Keep your limits low, all banks have payment and cash withdrawal limits. Don't be brave and have R1m limit when you only use R10k pm.
Click to expand...

Your rule is pointless, these guys have enough info on you to raise the limits.
 
ToxicBunny said:
Ok, I as your friend have gotten my PC infected with a trojan from some or other source, this trojan sends out an email to everyone in the friends contact list, that contains a url.
You will click on the link, and it will install a trojan on your system that will capture your bank details the next time you log in to your bank.

See the problem?
Click to expand...

Like everything in life, it comes with risks. If your friend sends you a link asking you to visit stupidjokes.ru, be cautious. You probably shouldn't be friends with that person either, they are probably the same friends that click on those "see Osama being killed" videos or "see who is viewing your profile" on FB.
 
ToxicBunny said:
Your rule is pointless, these guys have enough info on you to raise the limits.
Click to expand...

Limits are set and configured differently at each bank. Not pointless. Some banks only allow limit changes IN the bank. Different controls, different banks.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X