Posts Tagged ‘security’

In matters of security, is a small credit union a safer bet than a large bank?

Wednesday, November 16th, 2011

In today’s post, Intersections’ Consumer Security Adviser Neal O’Farrell examines the issue of bank security. Are you safer with a small credit union or community bank? That’s a question that’s increasingly being asked by consumers around the country who are considering moving their bank accounts from a large bank to a smaller credit union or community bank.

According to a recent article in CUInfosecurity.com, risk is the top concern as consumers consider moving their accounts from larger banks to credit unions or community banks. The article points out that at least 650,000 Americans have switched to credit unions since Sept. 29, 54 percent of credit unions have reported increases in share growth, and one of the largest credit unions said its new members and checking-account openings are up 70 percent for the months of September and October.

And credit unions aren’t alone. The same article pointed to a recent poll by the Independent Community Bankers of America which found that 60 percent of community banks had picked up new customers as a result of frustrations associated with larger banks.

If you are thinking of switching from a larger financial institution, or from a bank to a credit union, security should always be a concern. Once you’ve done a side-by-side comparison on key features like account fees and features, loan and credit card interest rates, ATMs locations and fees, and customer service, it’s time to think about security.

There is a concern that many smaller financial institutions are still struggling financially, and may not have enough of a security budget to match that of a larger institution. And if they’re lucky enough to be swamped by new customers, will their security budget and preparedness be able to keep pace?

Those are the most common security questions. Can a credit union really protect me – not just my money but all my personal information too? How good and quick are they at detecting a security breach and notifying me? How quickly can they resolve a security issue or fraud? And will my money be any safer there than at a large bank?

Credit unions have long argued that history shows they suffer from fewer attacks than larger banks. Experts on the other hand have argued that’s only because of their small size. It’s like the Windows vs. Apple argument – Apple users claim Apple products have suffered from fewer attacks because they have better security built in, whereas experts argue it’s just about economics. Hackers and malware writers simply ignored Apple for years because it had so few users compared to Microsoft. Writing code to target Apple products just wasn’t economically viable – just not worth the time.

But as the popularity of Apple products has surged, thanks to iPhone and iPad, we suddenly started to see “Mac Malware” emerge and the malware authors just followed the crowds.

That’s what I expect if there’s a major shift from larger banks to smaller and more local banks and credit unions. The hackers will follow the crowds and I’m just not sure that smaller financial institutions are prepared for the risk exposure. Many are still struggling financially and have not been able to make the enormous and endless security investments the bigger banks have been making.

My recommendation? Before you make the big jump, talk to the financial institution you’re thinking about jumping to. Create a list of the security features you may already enjoy, like two (or more) factor authentication, phishing and keylogging protection, account alerts etc. Then compare that to the security features being offered by your new home. At least with a smaller financial institution you’re more likely to be able to meet a real person and get some real answers.

And make the move slowly, by opening up an account with credit union or bank but keeping your original bank account open for a while. At least until you’ve had time to test your new surroundings.

I think credit unions and community banks should also raise the security discussion themselves. Larger banks are notorious about staying tight lipped when it comes to security, worried that the more they talk about things like identity theft, the more their customers will worry. Whereas the opposite is probably true – talk more and customers worry less, because they know the bank is taking it seriously. Talk less and customers have a right to worry more, if the only people who don’t seem to be worried about security are the ones who should be worried most.

Want to learn more about identity theft protection and our credit monitoring services?

Keep informed about the latest threats to your safety. Join our Facebook group.

Summer Security Tips

Wednesday, June 1st, 2011

The Daily Shield is pleased to share this short video from security expert Jim Stickley from Trace Security. Jim offers some summer safety tips to help you keep safe and secure.

Visit msnbc.com for breaking news, world news, and news about the economy

More tips to protect your identity when traveling for business or pleasure this summer.

And here are the latest summer safety tips from Intersections Inc.

Want to learn more about identity theft and fraud protection?

Keep informed about the latest threats to your safety. Join our Facebook group.

Not a pretty picture – FBI details how criminals use social networks

Thursday, July 29th, 2010

Yesterday, Gordon M. Snow, Assistant Director, Federal Bureau of Investigation testified before the House Judiciary Subcommittee on Crime, Terrorism, and Homeland Security.  He outlined FBI efforts to fight cybercrime on social networking sites.

It’s not a pretty picture. The rise of social networking sites like Facebook over the past three years has seen a corresponding rise in attempts by criminals to use these sites to target unsuspecting users. Accordig to Snow, “cyber criminals are using a variety of schemes to defraud or victimize innocent social networking site users.”

He went on to highlight some of the most serious cybercrimes, which the Daily Shield has summarized below:

Social Engineering

“Regardless of the social networking site, users continue to be fooled online by persons claiming to be somebody else. Unlike the physical world, individuals can misrepresent everything about themselves while they communicate online, ranging not only from their names and business affiliations (something that is fairly easy to do in-person as well), but extending as well to their gender, age, and location (identifiers that are far more difficult to fake in-person).”

He went on to say that “In addition to Identity Theft crimes, child predators routinely use social networking sites to locate and communicate with future victims and other pedophiles.”

On the topic of online fraud, Snow reported,

“There are a variety of Internet fraud schemes being used by cyber criminals at any given time. By way of example, a recent fraud scheme involves a cyber criminal gaining access to an unsuspecting user’s email account or social networking site. The fraudster, who claims to be the account holder, then sends messages to the user’s friends. In the message, the fraudster states that he is on travel and has been robbed of his credit cards, passport, money, and cell phone; and is in need of money immediately. Without realizing that the message is from a criminal, the friends wire money to an overseas account without validating the claim.”

Phishing Scams continue to target unsuspecting users

“Phishing schemes attempt to make Internet users believe that they are receiving e-mail from a trusted source when that is not the case. Phishing attacks on social networking site users come in various formats, including: messages within the social networking site either from strangers or compromised friend accounts; links or videos within a social networking site profile claiming to lead to something harmless that turns out to be harmful; or e-mails sent to users claiming to be from the social networking site itself. Social networking site users fall victim to the schemes due to the higher level of trust typically displayed while using social networking sites. Users often accept into their private sites people that they do not actually know, or sometimes fail altogether to pproperly set privacy settings on their profile. This gives cyber thieves an advantage when trying to trick their victims through various phishing schemes.”

On the topic of Data Mining

“Cyber thieves use data mining on social networking sites as a way to extract sensitive information about their victims. This can be done by criminal actors on either a large or small scale. For example, in a large-scale data mining scheme, a cyber criminal may send out a “getting to know you quiz” to a large list of social networking site users. While the answers to these questions do not appear to be malicious on the surface, they often mimic the same questions that are asked by financial institutions or e-mail account providers when an individual has forgotten their password. Thus, an e-mail address and the answers to the quiz questions can provide the cyber criminal with the tools to enter your bank account, e-mail account, or credit card in order to transfer money or siphon your account. Small-scale data mining may also be easy for cyber criminals if social networking site users have not properly guarded their profile or access to sensitive information. Indeed, some networking applications encourage users to post whether or not they are on vacation, simultaneously letting burglars know when nobody is home.”

As the popularity of social networking sites grow, so do the risks associated with using them. Here are a few tips to help protect yourself online.

1) Be careful when clicking on links and don’t blindly trust that a message is really from who it says it is from. A general rule of thumb is, if it doesn’t feel right to click on the link, don’t!

2) Be careful what you post about yourself online. Why is this important? Because a common technique hackers use to break into accounts is to click on the “forgot password” link. They then guess at your password by using information such as your birthday, place of birth, your job, marital status, that you have posted online for everyone to see.

3) Understand and frequently review the security and privacy settings for each social network in which you participate. Select the most restrictive settings possible and realize that not everyone is your friend out there.

4) Not everyone is your friend and you don’t have to accept every friend request. As you have read above, hackers and criminals will create fake profiles to obtain personal information from you.

5) In addition to being careful about what you post online, remember that everything that you put on the Internet is permanent. Even if you delete your social network profile, criminals can print text and photos or save them to a computer.

Stay informed about all the latest online and offline threats to your identity. Join our Facebook group.

Learn more about the flexible and innovative solutions from IDENTITY GUARD®.