Electronic payment transactions in Switzerland: Hacker attacks on the increase
23.05.2007 - Targeted attacks by hackers on the accounts of private individuals and institutions who carry out their payment transactions online via PC are on the increase in Switzerland. The harmful functions also include amongst other things undesired access to e-banking accounts. This is why surfing habits are becoming increasingly important.
Private individuals and companies who carry out their payment transactions via their PC have, in the last few weeks, increasingly become the target of criminal hacker attacks in Switzerland. As MELANI warned in the last semi-annual report, there have been increased reports of cybercriminals attempting to carry out money transfers in the name of registered users to third-party accounts.
Hackers use the following technique which has already caused serious damage abroad: so-called malware is stored in a targeted manner on websites. When visiting a website of this nature, the malware can be transferred and installed onto a PC due to potential vulnerabilities or social engineering (targeted request to the user to carry out an action). From now on these programmes (malware) provide the cybercriminal with data on payment habits and select possible victims. The attack is pursued until control of the payment transaction application when the victim logs on is taken over by the hacker. Finally the hacker implements transactions without the knowledge of the account holder. For the bank, however, only the account holder appears to be carrying out the transaction.
Recommended measures to be taken:
- Protect your computer
With current antivirus software, a firewall and regular software updates you will be laying the foundation for a secure computer and secure e-banking. For more information please refer to:
http://www.melani.admin.ch/themen/00166/index.html?lang=en. - Be on your guard during e-banking sessions
In the case of irregularities and unusual procedures during your e-banking session, please contact your bank immediately. This includes for example unusual error messages and the appearances of pop-up windows and the like. - Follow certain rules of conduct
Along with technical measures, which contribute immensely to protecting your computer, certain rules of conduct are also required. Be wary of e-mails from senders whose name you do not recognise. Be careful when opening e-mail attachments or clicking on links. More often than not it is preferable to mistrust an e-mail. For more information please refer to:
http://www.melani.admin.ch/themen/00166/00172/index.html?lang=en.