bank fraud email trojan

John_Gray

earthstorm wrote: »

do you think the bank ones also come from the banks as i stated PERTAINING. in other words they make you think they are from the bank the same as what the OP has received pertaining to be from the Halifax with a trojan within an attachment. all banks have an email where you can forward Phishing emails too.

Do you think that the banks actually do anything with the myriad phishing emails which purport to have been sent by them?

tronator

John_Gray wrote: »

Occasionally it's not even as simple as that, since the file may be named
SomeFileOrOther.ZIP.EXE
which will look as if it was just
SomeFileOrOther.ZIP
to those who aren't displaying file extensions.
Since you double-click on both ZIP files and on EXE files to open / run them, unhappiness could occur...

That was one of the stupidest things Microsoft ever did, introducing the "feature" to hide known file extensions and enabling it by default. They thought it confuses people to see the file extensions, but the opposite is the case.

earthstorm

John_Gray wrote: »

Do you think that the banks actually do anything with the myriad phishing emails which purport to have been sent by them?

Yes under FSA guidelines if a bank gets a phishing report they must act on such reports. this is why when Barclays seems to done nothing about the many i was getting i asked the FSA what can i do when clearly Barclays were doing nothing and the phishing emails grew. It was them you told to me contact Barclays agains and remiond them of the FSA guildelines and this seems to have stopped these phishing emails, so i think they were all coming from the same source and Barclays have managed to get the source shut down.

I know how these things work as i have spent the last 11 years in the internet industry

henm2

The FCA (there is no FSA anymore) say
http://www.fca.org.uk/consumers/scams/common-scams/banking-and-online-accounts
“Keep in mind that a bank will not contact you by email asking for your personal information or account details.”
I would not worry about phishing emails. I used to get lots of them but now using a strong spam filter system I rarely get any. The system also gets rid of lots of other risky emails. If your email account does not provide a spam filter then change email provider to ones that do such as gmail, yahoo, or hotmail (Live)
If you are really paranoid about security for internet banking then you will not get anything safer than using a live linux distro running off a CD or USB flash drive for the purpose. Live distros run in the RAM memory of your PC/Laptop and are not installed.The live versions of Linux distros such as Linux Mint , PCLinuxOS or even Puppy Linux will be fine for this.

hubb

I am just wondering what the point of plain text email is. If you are sent a Zip it's there whatever the format text you choose. All it means is you can't see the HTML.

waddler_8

hubb wrote: »

I am just wondering what the point of plain text email is. If you are sent a Zip it's there whatever the format text you choose. All it means is you can't see the HTML.

http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Trojan%3aJS%2fRedirector

Lumstorm

hubb wrote: »

I am just wondering what the point of plain text email is. If you are sent a Zip it's there whatever the format text you choose. All it means is you can't see the HTML.

As the previous poster link says HTML can execute scripts just by being opened. HTML is just bad for E-mail unfortunately people use it to create horrible E-mails with garish fonts and embedded images and it carries infections. This is why your E-mail client for security should be set for plain text only and not to download images.

espresso

Lumstorm wrote: »

As the previous poster link says HTML can execute scripts just by being opened. HTML is just bad for E-mail unfortunately people use it to create horrible E-mails with garish fonts and embedded images and it carries infections. This is why your E-mail client for security should be set for plain text only and not to download images.

Only really paranoid users do this as e-mails are scanned by both your provider and by your own anti-virus if it's worth having installed.

Lumstorm

espresso wrote: »

Only really paranoid users do this as e-mails are scanned by both your provider and by your own anti-virus if it's worth having installed.

There's a new ransomware Cryptolocker hit over the last few weeks no anti-virus has been able to stop it. It encrypts your personal files with a strong encryption that nobody can break. You have 72 hours to pay or they will delete the key so nothing can be recovered. Don't just rely on anti-virus remember they are updated to block a virus after it is discovered so you could get a new one they don't know yet. http://twit.tv/show/security-now/427 Cryptolocker section is around 41 minutes into the program.

espresso

Lumstorm wrote: »

There's a new ransomware Cryptolocker hit over the last few weeks no anti-virus has been able to stop it. It encrypts your personal files with a strong encryption that nobody can break. You have 72 hours to pay or they will delete the key so nothing can be recovered. Don't just rely on anti-virus remember they are updated to block a virus after it is discovered so you could get a new one they don't know yet. http://twit.tv/show/security-now/427

As I said, some people are just paranoid.