Customer Security and Protections
Spectre and Meltdown Vulnerabilities and How to Protect Your Devices:
On January 3rd, we were made aware of two new vulnerabilities: "Spectre" and "Meltdown". The pair has the potential to impact desktop and laptop computers, servers, cloud servers, and mobile devices (tablets included) that are in use today. The danger in these vulnerabilities is that they can be leveraged to allow illicit programs to access unauthorized data which belongs to other processes on a given system. The vulnerabilities exist on devices that run Intel, AMD, ARM, and other processors. Although they were announced together, they are separate vulnerabilities and do not rely on each other.
The good news is that at the present time there are no known active exploits of these vulnerabilities. That being said however does not mean that there won't be any. Many cybersecurity firms expect that threat actors will attempt to develop exploits that leverage these vulnerabilities.Maintaining up to date patches is the best line of defense against Spectre and Meltdown. Our organization maintains a robust patching posture for the operating systems running in our environment. We have kept a close eye on patch releases that address these vulnerabilities. All major software manufacturers have already released patches or are expecting to release them as soon as possible. We continue to monitor along multiple fronts for latest developments and will adjust our defenses as necessary.ANB Bank's technology group maintains a high alert for additional information pertaining to these vulnerabilities. We will continue to closely monitor multiple channels for the latest developments as this vulnerability discovery is likely to continue to evolve. We recommend the following to help protect your devices and information online.
- Keep your computers and mobile devices up to date with patches and software updates. This includes keeping your security software, web browser, and operating system up to date. This is the first line of defense against viruses, malware, and other online threats. If you can, turn on automatic updates so you receive the newest fixes and patches as they become available.
- Set strong passwords. A strong password is at least eight (8) characters or longer in length and can include a mix of upper and lowercase letters, numbers, and special characters. Do not use the same password for your logins. To keep track of your passwords, use a password app like Keeper, eWallet 1Password, or Dashlane.
- Watch out for email and website (phishing) scams. Phishing scams use fraudulent emails and websites to trick users into disclosing private account or login information. Do not click on links or open any attachments in emails or click on links from pop-up screens from sources you are not familiar with.
- Keep personal information personal. Review your privacy settings on your social media accounts and avoid posting things like birthdays, addresses, mother's maiden name, or other personal information. Be wary of requests to connect from people you do not know.
- Secure your internet connection. Always protect your home wireless network with a password. When connecting and using public Wi-Fi networks, be cautious about what information you are sending over it.
- Shop safely. Before shopping online, make sure the website uses secure technology. When you are at the checkout screen, verify that the web address begins with https. Also, check to see if a tiny locked padlock symbol appears on the URL bar (depending on the browser - this could be on the left or right side of the URL bar).
Fraud Protection Resources
A New Twist on an Old Scam – The Federal Trade Commission has sent out a warning on an old scam that has a new twist. The scam is an old phishing scam where scammers are posing as a well-known tech company, email a phony invoice, and have you click on a link. Stop – do not click on the link ...
10 Scams Targeting Bank Customers – Customers often feel they may be the victims of financial fraud or theft. Here are basics on how to protect yourself, plus key defenses to remember
Scam Alerts from the FTC – Crooks use clever schemes to defraud millions of people every year. They often combine sophisticated technology with age-old tricks to get people to send money or give out personal information. They add new twists to old schemes and pressure people to make important decisions on the spot. One thing that never changes: they follow the headlines - and the money. Stay a step ahead with the latest info and practical tips from the nation's consumer protection agency. Browse FTC scam alerts by topic or by most recent.
IRS Tax Payer Identity Theft – The Taxpayer Advocate Service (TAS) is your voice at the IRS. We help people resolve tax problems with the IRS and recommend changes that will prevent problems.
Fighting Back Against Identity Theft – A one-stop national resource to learn about the crime of identity theft from the Federal Trade Commission.
Consumer Protection Topic – Cybersecurity and how to protect yourself while conducting business online.
Warning About 10 Scams Targeting Bank Customers – FDIC Consumer News Issues
Business Email Compromise from the FBI – Losses from the business e-mail compromise (BEC) scam are on the rise again. In this scam, criminals will compromise or spoof an email from the CEO or another executive of a business and send a fraudulent email to the CFO or another person in accounting and request that money be wired out.
Be Aware of Tech Support Scams – The Internet Crime Complaint Center of the FBI is receiving an increase in complaints relating to technical support scams where the caller claims to be an employee or an affiliate of a major computer software or security company offering technical support on a victim's computer. Please be aware that these types of calls are made by scammers who will ask you to visit a website, or have you connect your phone to a computer and visit their website so they can take control of your PC to fix it. Resist the urge to act quickly. Do not give unknown; unverified persons access to your devices or accounts. If you are unsure about the caller, hang up and call the company they represent yourself to verify the call.
IRS Tax Scams & Consumer Alerts – With tax season upon us, it serves as a good reminder to use caution when receiving phone calls and even emails. The IRS Service announces that aggressive and threatening phone calls by criminals impersonating IRS agents remain a major threat to taxpayers, headlining the annual "Dirty Dozen" list of tax scams for the 2017 filing season.
Before Giving to a Charity – If you're considering a request for a donation to a charity, do some research before you give. By finding out as much as you can about the charity, you can avoid fraudsters who try to take advantage of your generosity. Here are tips to help make sure your charitable contributions are put to good use. For more information, visit ftc.gov/charityfraud.
Protecting Yourself Online – Though the internet has many advantages, it can also make users vulnerable to fraud, identity theft and other scams. According to a Norton Cybercrime Report, 378 million adults worldwide were victims of cybercrime in 2013. The American Bankers Association recommends the following tips to keep you safe online.
How to Protect Yourself Online – Here are a few suggestions on ways to keep your personal information and money more secure when you go online
Start with Security: A Guide for Business – 10 practical lessons businesses can learn from the FTC's 50+ data security settlements.
How to Protect Your Computer – Protect your "Cyber Home" with simple steps to secure your computers and mobile devices for Internet banking and shopping.
The Leader's Guide to Cyber Essentials – Managing cyber risks requires building a culture of cyber readiness.
Verified by Visa
Setting up Verified by Visa adds an extra layer of security each time your Visa Debit Card is presented to make an online purchase at participating merchants. This free service will set up an extra password to be entered during an online transaction, helping to prevent unauthorized use.
Please note: if you have previously setup Verified by Visa for your ANB Bank Debit Card prior to June 5, 2017, you will need to re-enroll.