• Rule 2: do not store a digital certificates or digital credentials from your bank on the hard drive of your computer. Instead, save it on a memory stick or a disk if you still have that possibility. However, do not keep the memory stick with your digital certificate in your USB port, unless you are required to do so because you are about to start conducting a financial transaction right now.

  This approach will prevent others from accessing the certificates.   

• Rule 3: Besides keeping these certificates in a safe place, in order to prevent anybody else from taking advantage of them they must be encrypted whilst being stored.
  • You can get a free program that will allow you to store your passwords encrypted on your memory stick - neat and easy to use and very handy indeed (this program is also solving your Rule 4 challenge in a user friendly way!)  

• Rule 4: In most instances, your bank will not only ask you to provide a digital certificate, username and password to authenticate yourself but, as well, you will be required to provide a one-time transaction code or pin.

  This might happen whereby you were mailed via the post office a list of one-time transaction codes. The system will then ask you to provide a certain code on the list (e.g., 10th code on the list from the top) which, in turn, will authorize the transaction you want to make. Without providing such an authorization code you may neither be given access to the account balance nor be able to authorize a transaction.

  Keep this list in a safe place at home - not the office.   

• Rule 5: Following the above 4 rules is vital in reducing your risk for having malicious code or phishing attacks result in mishaps that can be costly.

  However, besides the one time transaction code you will very likely have to type in your:

  1. username or customer number,
  2. password.

  as well. Neither the username nor password should be typed but instead copied into the appropriate fields, thereby making it tougher for a program, such as a keylogger, to steal such information.

  You were provided a link for obtaining an easy to install and administer program that allows you to copy this encrypted information quickly, thereby reducing the risk for having your username and password stolen under Rule 3 above.   

• Rule 6: Do not use shared computers to conduct financial transactions. Neither are computers in public places suitable such, as those in the library, because they are likely far more vulnerable and exposed to threats than your work or home computer ever will be.

• Rule 7: Do not click on a URL or web address provided in an e-mail message. Instead, use the web address that you stored under your favorite bookmarks last time when you conducted a financial transaction on your bank's web site. Else, just type in the web address.

• Rule 8: Always use the button 'Logout' (sometimes called Logging off or Sign-out, when you are finished with your online banking session and close your broswer => re-start browser if you want to cintinue surfing.
     

• Rule 9: Activate 'Do not save encrypted pages to disk' in Internet Explorer (IE) by doing as follows:
  1. click on Tools > Internet Options > Advanced, AND
  2. move cursor down to Security, mark the box with the above text.

  3. Regel 10: If something appears suspicious to you, it probably is and most certainly the message did not originate from your bank, such as your bank:
     1. does not send you e-mails that contain a hyperlink connecting you to the logon page of your bank's online banking portal or a message that asks you to provide username and codes,
     2. does not ask for sending via e-mail your credit card number, access codes, PIN or transaction codes.
        

1. a firewall check if yours works properly ,
2. anti-virus software choosing the right anti-virus software - choose the best for free, and
3. anti-spyware check if your computer is infected and get the best solution here

Why? Because your bank will point out that you have not followed best practice... thereby failing to fulfill any of your obligations under the online banking agreement that you signed.

This means you will have to absorb the losses and damages you may have experienced due to a hacker succeeding in penetrating your computer's defenses. So check how your computer's security measures stack up regarding online banking and best practice NOW please. Better safe than sorry.   

• CT210007: UPDATE 1 - Windows XP 101 - PART 1 - Grandma's Tricks - Regular Service & Tune Up ==> Turbo Charge XP 2005-08-30 ,
• CT210009: Windows XP 101 - PART 2 - Paris Hilton Knows CyTRAP's THREE Rules for Better Securing her PC with Windows Update 2005-10-24,
• Cookies - changing options in Mozilla, Firefox and Internet Explorer to better protect your privacy
• UPDATE 2 - Yes Virginia - phishing attacks are on the rise and getting meaner - we tell you how to surf safer

• CT110036: Microsoft Windows - Error in the handling of corrupted Windows Meta Files (.wmf) 2005-12-28

• keylogger

DEUTSCH

• Key-Logger