Tuesday, March 31, 2009 by Dan Nolan
I’m pretty nonchalant about my online security. Apart from keeping my copy of Norton up to date, I don’t worry too much. I’m not entirely naive about online safety, though: I never reply to emails from Nigerian princes and I certainly don’t presume there is a problem with my bank account based on the advice of an email skulking around in my junk mail folder.
Still, when I discovered over the weekend that my internet banking site of choice now looked like this, I was a little perturbed (click picture to enlarge).
- A request for my 16-digit card number?
- A plea for my memorable word?
- Broken html tags?
Links from banks to their secure log-in facilities also took me to their evil phishing twins. I had contracted a virus from a suspect document and it was causing my laptop to phish like a bear downstream. My Maginot Line defences had crumbled.
Resisting the urge to log into my Facebook or Twitter accounts to document these findings (lest my keystrokes were being recorded), I phoned a friend to discuss the problem.
The phishing virus was forcing a redirect every time I tried to visit a legitimate banking site, sending me to an almost identical one-page form designed to trick me into entering my details. Aside from the giveaway broken tags and poorly constructed English (“Simply follow the steps 1-2”), the site looked genuine. Indeed, if someone had spent thirty extra seconds proofing their html, and if I didn’t work in the internet-savvy environs of an online marketing company, I might have fallen for the trick.
Not everyone is in this position. Phishing scams are becoming more advanced, more covert. Looking at the screenshot above, it is easy to see how some people, perhaps not fully versed in internet security, could be drawn in to these scams. My advice is to be careful; evidently we are not as safe as we think.
Tom Mason







