Language Selection

English French German Italian Portuguese Spanish

FDIC advises banks on how to protect against spyware

Filed under
Security

The Federal Deposit Insurance Corp. (FDIC) today issued a list of best practices for financial services firms that details how to protect against spyware, which the agency said can be used by criminals to collect customer data or hack into banking systems.

"It is critical that banks stay vigilant about the risks involved with this malicious software and take appropriate action so that they and their customers do not fall victim to it," said Michael Zamorski, director of the FDIC's Division of Supervision and Consumer Protection.

The guidance spells out the risks associated with spyware and recommends actions that financial institutions can take to mitigate those risks on internal computers as well as on those used by customers to connect to transactional banking Web sites.

The FDIC recommends rolling out multifactor authentication to limit the ability of identity thieves to access customer accounts. Firms should also consider spyware as part of their risk-assessment analysis and bolster security against it by setting Internet-use policies for employees. The FDIC also recommends that banks advise customers on the risks of using public computers such as those in hotels, libraries or Internet cafes to connect to online banking Web sites because of the uncertainty of what spyware may have been installed on the public equipment.

According to the FDIC, the risks associated with spyware include allowing attackers to eavesdrop and intercept sensitive communications, such as customer IDs and passwords; allowing unauthorized access to user accounts; permitting unauthorized access to bank systems; and increasing vulnerability to other Internet-based attacks, such as phishing.

By Lucas Mearian
ComputerWorld.

More in Tux Machines

Yocto-on-i.MX6UL gateway serves up I2C and SPI on a DB9 port

Axiomtek’s compact “IFB125” DIN-rail IoT gateway runs Yocto Linux on an i.MX6 UL SoC with dual LANs, mini-PCIe expansion, extended temperature and vibration resistance, COM and USB ports, and a DB9 port that supports both SPI and I2C. Axiomtek has released a minor variation on its IFB122 IoT gateway. Like the IDB122, the new IFB125 runs Yocto Project code with Linux 3.14.52 on NXP’s 528MHz Cortex-A7 based i.MX6 UltraLight (UL) SoC. The headless gateway is designed for remote control and remote monitoring management applications such as unmanned control room, industrial automation, automatic parking lot, and traffic cabinets. Read more Also: Display-oriented eNUC SBC runs on Apollo Lake

Fedora Elections

Linux Foundation and Verizon

  • Verizon joins the Linux Foundation's ONAP project
    Verizon has joined the Open Network Automation Platform (ONAP) project as a Platinum member, a move that reflects the service provider's desire to drive industry harmony around network virtualization and automation. ONAP brings together several global carriers and vendors to build an automation and orchestration platform to transform the service delivery lifecycle for network, cable and cloud providers.
  • Verizon Joins Linux Foundation's Open Network Automation Platform Project as Platinum Member
    Verizon and The Linux Foundation, the nonprofit organization enabling mass innovation through open source, announced today that Verizon has joined the Open Network Automation Platform (ONAP) project as a Platinum member. ONAP brings together the majority of global carriers and vendors to build an automation and orchestration platform to transform the service delivery lifecycle for network, cable and cloud providers. ONAP enables nearly 60 percent of the world's mobile subscribers.

Android Leftovers