BPI and BDO Hack/Phishing Scam

BE INFORM ON HACKING/PHISHING BANK ACCOUNT

(BPI, BDO)

Share and Be Inform

What is Phishing

Phishing is a form of fraud in which the attacker tries to learn information such as login credentials or account information by masquerading as a reputable entity or person in email, IM or other communication channels.

Typically, the victim recieves an email notifying that there is an internal security system issue or the the need to update their account information with the links directing them to a malicious website. This website may look legit but if you look to the Email Address you will notice that it is fraud. This maliciuos email address contains the information of your bank account, user ID, password, , first name,middle name, last name, address, email password, credit card number and CREDIT CARD SECURITY number

To make look the website legit, persons who are phishing uses logo name, tradename and and other features of the company websites. There are tips to avoid become a victim of this fraud.

1.   

  1. Keep Informed About Phishing Techniques –

Keep your eyes peeled for news about new phishing scams. By finding out about them as early as possible, you will be at much lower risk of getting snared by one.

    2.  Think Before You Click! – It’s fine to click on links when you’re on trusted sites. Clicking on links that appear in random emails and instant messages, however, isn’t such a smart move. Hover over links that you are unsure of before clicking on them. Do they lead where they are supposed to lead?

3  3. Install an Anti-Phishing Toolbar – Most popular Internet browsers can be customized with anti-phishing toolbars. Such toolbars run quick checks on the sites that you are visiting and compare them to lists of known phishing sites.

    4. Verify a Site’s Security – It’s natural to be a little wary about supplying sensitive financial information online. As long as you are on a secure website, however, you shouldn’t run into any trouble. Before submitting any information, make sure the site’s URL begins with “https” and there should be a closed lock icon near the address bar. Check for the site’s security certificate as well

     5. Check Your Online Accounts Regularly – If you don’t visit an online account for a while, someone could be having a field day with it. Even if you don’t technically need to, check in with each of your online accounts on a regular basis. Get into the habit of changing your passwords regularly too. To prevent bank phishing and credit card phishing scams, you should personally check your statements regularly. Get monthly statements for your financial accounts and check each and every entry carefully to ensure no fraudulent transactions have been made without your knowledge.

6. Keep Your Browser Up to Date – Security patches are released for popular browsers all the time. They are released in response to the security loopholes that phishers and other hackers inevitably discover and exploit. If you typically ignore messages about updating your browsers, stop. The minute an update is available, download and install it.

7. Use Firewalls – High-quality firewalls act as buffers between you, your computer and outside intruders. You should use two different kinds: a desktop firewall and a network firewall. The first option is a type of software, and the second option is a type of hardware. When used together, they drastically reduce the odds of hackers and phishers infiltrating your computer or your network.

8. Be Wary of Pop-Ups – Pop-up windows often masquerade as legitimate components of a website. All too often, though, they are phishing attempts. Many popular browsers allow you to block pop-ups; you can allow them on a case-by-case basis. If one manages to slip through the cracks, don’t click on the “cancel” button; such buttons often lead to phishing sites. Instead, click the small “x” in the upper corner of the window.

9. Never Give Out Personal Information – As a general rule, you should never share personal or financially sensitive information over the Internet. This rule spans all the way back to the days of America Online, when users had to be warned constantly due to the success of early phishing scams. When in doubt, go visit the main website of the company in question, get their number and give them a call. Most of the phishing emails will direct you to pages where entries for financial or personal information are required. An Internet user should never make confidential entries through the links provided in the emails. Never send an email with sensitive information to anyone. Make it a habit to check the address of the website. A secure website always starts with “https”.

10. Use Antivirus Software – There are plenty of reasons to use antivirus software. Special signatures that are included with antivirus software guard against known technology workarounds and loopholes. Just be sure to keep your software up to date.

Bank of the Philippine Island BPI

BPI issues a statement regarding this SCAM

To all BPI Express Online users:

This is to inform you of the re-emergence of email phishing scams meant to prey on unsuspecting EOL users. Phishing e-mails are sent to trick targeted individuals into revealing personal and financial information.

Recently, some EOL users received an email that seemed to come from BPI Express Online. Clicking on the link directed users to a fake site that asked for several user information.

Please be informed that this is a phishing scam and that BPI Express Online will never ask its users to log in to their online accounts through embedded links nor secure personal and/or banking information via unsolicited emails.

While the BPI Express Online Team has already taken action regarding this phishing activity, we, nevertheless, would like to ask you to exercise caution in providing personal and financial information on suspicious sites and to check for signs of fraud.

If you receive a suspicious e-mail, immediately report it to the bank. Please send a copy of the e-mail you received to expressonline@bpi.com.ph.”

BPI has been named by Asian Banker as the Best Retail Bank in the Philippines for 2015.

SOURCES: http://www.phishing.org, http://searchsecurity.techtarget.com, https://www.bpiexpressonline.com