Online Banking Information | Safe Internet bank

If you choose to access your banking information from a system other than your own, you should be aware of further security issues such as keystroke capturing software. This software is designed to help people monitor how computers are used. Specifically, the software records the order in which keys are pressed, and can monitor the length of key presses (e.g. to determine multiple spaces or backstrokes).

It is usually designed to run as hidden, so that users are unaware that their actions are recorded. For parents, employers and teachers, this software can be a useful way of monitoring and controlling how computers are used. In the wrong hands however, this software can be used to target login information such as that used to access online banking.

If you are in any doubt about the security of a computer system that is not personally administered by you, do not access your internet banking.

Trojans take their name from the term 'Trojan Horse' and are a type of computer virus which can be installed on your computer without you realising. Trojans can be capable of installing a "keystroke logger", which captures all of the keystrokes entered into a computer keyboard. Some specifically seek to capture passwords entered at certain web sites, by capturing keystrokes or taking screen shots of sites you visit. This information is then sent to the fraudsters over the Internet.

Trojans are malicious programs which look innocent, fool you into accepting them, and then more or less take over your computer. You can go on using your PC or laptop while a criminal is also using it, remotely, for his illegal purposes. The criminals have also designed programs called “rootkits”, which hide the fact that your computer has been compromised, so your anti-virus software never spots the Trojan infection.

How do Trojans get on your computer?

So, how do Trojans get on to your computer in the first place? Many are sent via email attachment, masquerading as a legitimate piece of software. When you open the attachment, the Trojan silently installs itself on your computer. In most cases, there is no indication this has occurred, and you innocently play the game or enjoy the new screensaver before sending it on to the next victim in the chain. Instant messaging systems carry the same sorts of risks as email – files shared this way can just as easily carry a Trojan.

Typically the fraudsters send out emails at random to get people to click on a link from the email and visit a malicious website where vulnerabilities in the web browser are exploited to install the Trojan. The emails are normally related to Internet banking and try and dupe people into visiting clicking on the link to the malicious web site with a variety of excuses.

Even regular web browsing can pose a risk. Every day more and more websites are infected with malicious software without the site owner’s knowledge. Just visiting an infected site can result in your computer being infected in turn, and perhaps becoming part of a botnet.

Of course free software and even shareware software can also be infected. That exciting new game, screensaver or utility program can hide a Trojan program ready to infect your PC.

Social networking sites like Facebook are another rich opportunity for criminals, who dupe people into sending infected movies, pictures and web links to their friends.

Firewalls, up to date antivirus software and anti-spyware programmes all provide the best defence from Trojans so it is important you use these to protect your computer.

Further information

Find out more about Trojans, visit: www.banksafeonline.org.uk/trojans_explained.html

Read our guide on how to avoid becoming a victim of cybercrime

The safest thing is to ignore any invitation to click a link, but instead browse directly to the website you know belongs to the organisation in question. This may take a little more time, but is the safest method.

Once there you will quickly see whether the message in the email was genuine or not. Many email programs now include a feature which pops up a warning of fake addresses when you hover the mouse over a link in an email. If you see this warning, don’t click the link, just delete the email.

The latest version of web browsers like Internet Explorer, Chrome and Firefox can also check the address of a website against a database of known bad sites and warn you if you’re about to visit a fake one.

How to protect yourself from phishing

To protect yourself from phishing attacks, follow these simple rules:

• Never open emails from people you don’t know. Delete them and empty the bin.
• Never reply to phishing emails. No real financial institution will ever ask you for your credentials in an email.
• Check the web site address when you are buying something over the Internet - open a browser window and use a search engine to find the site. If the addresses don’t match, it's probable that the site you are about to visit is fake.
• Check your bank and credit card statements carefully and report any unfamiliar transactions.
• Use a personal firewall.
• Use anti-virus software and update it at least daily or each time your computer is switched on.
• Install software that looks for Trojans and deletes them.
• Only download software from reputable sources. Free games and screensavers might be hiding Trojan software.