Armed with confidential information, thieves plunder bank accounts at
will, and rapidly, as unsuspecting small businesses and school districts
around the United States are learning to their dismay.
"The cyber criminals have spotted a very high value yet very soft target"
said Melih Abdulhayoglu, CEO of Comodo, in a recent video about bilked
school districts at http://www.comodovision.com/small-business/schools-get-hacked-students-and-taxpayers-lose/.
"They inject…malicious executables into school districts' systems, and they
take over their bank details and they siphon off money,
"It's a sad, sad, sad day," said Abdulhayoglu, when money from innocent
organizations goes "straight into cyber criminals' pockets."
"We don't have to suffer at the hands of cyber criminals…all we need is
prevention as the first line of defense."
Such prevention is available both for banking institutions and for their
online depositors.
Online depositors should protect their personal computers from malicious
executable files, otherwise known as malware, by using top-quality firewall
and antivirus software. Such software should prevent software such as
keyloggers from installing itself in a computer.
By law, one single password is not enough protection for online banking.
To guard against hacker incursions, banks are required to demand more ID
when communicating securely with customers online. The Federal Financial
Institutions Examination Council (FFIEC) requires that banks and credit
unions only allow customers to access their accounts if they use at least
one other identification factor in addition to the passwords.
Requiring that the customer enter a password is a layer of protection
called "authentication"- ensuring that the customer is authentic. In
addition, the financial institution must authenticate again by asking for at
least one other piece of information. The information can be something the
customer "is" such as a fingerprint, or something the customer "has" such as
a physical key.
When hackers stole $588,000 from Patco Construction Co. in Maine in May
2009, Patco's attorneys advised it to sue its bank for not requiring
adequate authentication.
"The case is ongoing," said Abdulhayoglu. "Whoever wins, the lawsuit will
still be expensive and time-consuming, and both sides will wish they could
have prevented it."
"Unfortunately, it's difficult to stop a determined thief. But
prevention-based software can often mitigate risk, making the Internet safer
for us all."
About Comodo
Comodo is a leading brand in Internet security, covering an extensive
range of security software and services, including digital certificates, PCI
scanning, desktop security, online faxing, and computer technical support
services.
Businesses and consumers worldwide recognize Comodo as standing for
security and trust. Comodo products secure and authenticate online
transactions for over 200,000 businesses and have more than 18,000,000
installations of Comodo desktop security software, including an
award-winning firewall and antivirus software offered at no charge.
The Comodo family of companies is committed to continual innovation, core
competencies in PKI, authentication, and malware detection and prevention.
As a catalyst in eliminating online crime, the companies' mission is to
establish a Trusted Internet.
With US headquarters overlooking Manhattan on New Jersey's waterfront,
and global resources in United Kingdom, China, India, Ukraine, and Romania,
Comodo products offer intelligent security, authentication, and assurance.
Comodo -- Creating Trust Online®. For more information, visit
website.
========
Katharine Hadow
COMODO Media Relations