Facebook Google+ Twitter
+ Reply to Thread
Page 2 of 4 FirstFirst 1 2 3 4 LastLast
Results 11 to 20 of 31

Thread: Internet Banking Hacking - LOOK OUT

  1. #11
    Admin & TVCatchup Staff TVC_H4U's Avatar
    Join Date
    Oct 2008
    Posts
    4,073

    Default



    It depends on how the virus intercepts the connection, but I think the most obtuse and random browser will be the most secure. The ones with larger user base - are the ones where hackers will get most "results" so are targeted.

    That is why theirs Viruses for iOS and Android - not so much Windows Phone.
    Same reason why theirs Viruses for Windows - not so much linux/mac.
    Adam H
    " You might very well think that; I couldn't possibly comment. "

  2. #12
    F1 Editor supremo & TVCatchup’s F1 champ for 2011 tartist's Avatar
    Join Date
    Nov 2008
    Posts
    3,285

    Default

    Quote Originally Posted by TVC_H4U View Post
    It depends on how the virus intercepts the connection, but I think the most obtuse and random browser will be the most secure. The ones with larger user base - are the ones where hackers will get most "results" so are targeted...
    That's what I was thinking, so I did a search on browsers vulnerable to mitb and I keep getting Firefox coming up; seems mitb gets in via injecting itself into firefox extensions. Example HERE.

    One way to guarantee against mitb when banking is to boot up into a virtual PC - fresh browser each time. I used to use one for testing dodgy software, SunSystems VirtualBox, very easy to boot up into. Any other Virtual PC recommendations?

  3. #13
    F1 Editor supremo & TVCatchup’s F1 champ for 2011 tartist's Avatar
    Join Date
    Nov 2008
    Posts
    3,285

    Default

    I've installed VirtualBox again, it's not Sun now, it's been taken over by Oracle, and after installation it's a piece of cake to fire up. You just have to make it "business as usual", i.e. I want to go to my bank, I double click VirtualBox, then connect to bank with IE. Easy and safe.

  4. #14
    Full Member tacoben's Avatar
    Join Date
    Oct 2008
    Posts
    1,372

    Default

    I just use two computers one is for being careful with and the other is for playing with. So hopefully the chances of a virus or small but obviously not eliminated. As for the mac it was obvious someone was going to claim superiority. You really are living in the past. Plus I consider things like install wizards and the various other add ons I need to run mac software just are irritating as viruses. Plus getting back to the topic a little not one bank has recommended using an apple as a way to protect your money.

  5. #15
    Sad man with no other home but TVC :0)
    Join Date
    Aug 2009
    Posts
    717

    Default

    On iOS there are no viruses, unless you've jailbroken. If you're using the Safari app, then no other app can interact with it. Besides it being against Apple's rules (and they are very good at catching things out, even if they do manage to slip through and get released in about a day it will be gone), it's just not possible to program an app to do that.

  6. #16
    Admin & TVCatchup Staff & 'Old Nag Napster 2012/13' TVC_Colwal's Avatar
    Join Date
    Oct 2008
    Location
    Brighton
    Posts
    2,660

    Default

    Quote Originally Posted by Jonathan View Post
    On iOS there are no viruses, unless you've jailbroken. If you're using the Safari app, then no other app can interact with it. Besides it being against Apple's rules (and they are very good at catching things out, even if they do manage to slip through and get released in about a day it will be gone), it's just not possible to program an app to do that.
    Doesn't mean to say that you are safe...!!!
    Just because it is iOS doesn't mean it cannot be exploited as installing a simple keylogger app of which apple approved will sort that out http://www.ubergizmo.com/2011/06/spykey/

    No system is safe and as H4U says you just have to use common sense.
    Ever heard about the WiFi hackers at airports that direct you to a cloned page which they are controlling and you think you are working on your account which you are, but so is the redirector/hacker who is siphoning all of your money out of your account.
    I also know of a person who had his identity stolen, which believe me is not that hard to do, and they drained his account of over £50,000.

    Using common sense is the rule of thumb when using internet banking and to be honest, if they target you then you will have little chance knowing that you are being hacked.
    Tell us why you use TVCatchup and how? http://alturl.com/f88tv
    ☑ Saddam Hussein ☑ Osama Bin Laden ☑Muammar Gaddafi ☐ Bashar al-Assad ☐ JustinBieber ☐ One Direction ☑ JLS

  7. #17
    Full Member tacoben's Avatar
    Join Date
    Oct 2008
    Posts
    1,372

    Default

    Colwals right if you are a target then it really is just bad luck and nothing you can do will stop that. Being careful and understanding how easy it is are the best way to avoid problems.

    I was less than careful one day in a cafe and had my wallet stolen. In the 15 minutes from it being stolen and me noticing the person had already tried to purchase goods on my card. I was very lucky he was greedy and spent over my limit. His second transaction was much smaller but by that time I had informed the bank and by his third transaction the card was cancelled. One thing that I do is have my card limits set at an amount good for me and when the bank writes and tells me that have wonderfully upped my limit I call them and put it back down.

    Most of us can survive on 1000 pound limit each month and if we need to buy something big then a quick phone call before hand is the best way.

  8. #18
    Full Member tacoben's Avatar
    Join Date
    Oct 2008
    Posts
    1,372

    Default

    http://mclov.in/2012/02/08/path-uplo...r-servers.html

    Just think, you save your pin number in your address book because you can never remember it. Then someone either in the company or someone exploiting the transfer of information takes advantage of that information. Though unlikely it would be prudent not to store sensitive information which I am sure many of us already do.

  9. #19
    F1 Editor supremo & TVCatchup’s F1 champ for 2011 tartist's Avatar
    Join Date
    Nov 2008
    Posts
    3,285

    Default

    Quote Originally Posted by tacoben View Post
    http://mclov.in/2012/02/08/path-uplo...r-servers.html

    Just think, you save your pin number in your address book because you can never remember it. Then someone either in the company or someone exploiting the transfer of information takes advantage of that information. Though unlikely it would be prudent not to store sensitive information which I am sure many of us already do.
    I'm not sure what PATH is, I gather it's yet another social networking app, but this is just another example of one's private information being exposed one way or another to people who are not supposed to have it.

    I joined a similar site a year or two back and it immediately dived into my address book and emailed invitations to join, not only to my friends but old work colleagues, banks, businesses and so on, all purporting to come from me. Which goes to show that even those of us who are more aware of security issues than many, and have all kinds of safeguards in place, can be caught off guard.

  10. #20
    Sad man with no other home but TVC :0)
    Join Date
    Aug 2009
    Posts
    717

    Default

    Just because it is iOS doesn't mean it cannot be exploited as installing a simple keylogger app of which apple approved will sort that out http://www.ubergizmo.com/2011/06/spykey/
    I'm not sure I understand? What you linked to is a keylogger for a computer, the onyl thing it has to do with an iPhone is that it send the results to it. But it's not monitioring the keystrokes on the actual iPhone. Because each app is in it's own sandbox, it can't modify or read files above it's directory. When you choose a photo all that a developer programmes is "show the photo picker", not "open image directory", "list all the images in it", "display the images". There just isn't that much control. When you see messages asking if you want to allow the app to use your location, it has no choice whether that message is shown or not. The app simply asks for your location from the underlying service, and if you haven't used location in that app before, the iOS will show the message.

    There is only one thing that allows you to silently share data between apps, and the programmer needs to know in advance what data, and how to format it etc. And given Apple's review system they will check this one method.

    The invasions like intercepting data at public wifi hotspots, can happen on any device, as it is outside the control of that device.

    Common sense does go a long way, I agree. The most basic trick is to name a program something like "pictures of you", the inquistive user will open it, not realising it is a program, because they haven't changed window's settings to show file extensions, and the icon looks like the pictures folder icon. That program can then do anything, download more visious malware or erase files. On iOS the only way a typical user (not developers or beta testers) can put an app on their device is from the AppStore, which will have gone through Apple first, and it can only access its own files and can't even modify all of its own files.

+ Reply to Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts