Untrustworthy
Websites are those which don’t look like the original one Take help of tools
like WhoIs to scan the websites that look untrustworthy. Some websites are
poorly configured that may lack security configuration try to avoid transaction using those websites because an attacker may try to steal to card information
and credit saving during any purchase. Sometimes Banner ads Links sent to you by
people for suspicious activities.
2. Use
strong password policies.
While online transaction with weak password attacker
might use tools or bruteforce to crack your password always use the password
manager for securing your password and don’t use the same password across
multiple accounts, including financial accounts. Avoid using name, date of birth, and phone no in your password.
3. Don’t
think links are genuine in emails.
Phishing mail may involve malicious link that
asks the recipient to click on a hyperlink or open an attachment and then enter
personal information, such as bank account numbers. Sometime attacker might trick you to clicking
on some malicious link which can be used to steal your credentials.
4. Avoid public Wi-Fi network.
If you’re making online purchases with your
phone’s browser while it’s connected to an open network then it’s possible for
other people to steal or access the information you’re transmitting. Wait until
you’re on a secure network instead. An attacker may try to intercept through the malicious program and may steal your credentials while recording everything you
type. Avoid online transaction using public Wi-Fi network because through
weaker network attacks like CSRF can be done.
5. Check on banking/shopping application security.
Whenever you download a new application especially
related to shopping or financial management, check its security policies first.
Because if security features are not properly configured then in that case
attacker may try to steal or tamper your personal data and credit value.
6. Check firewall policies and anti-malware
solution for additional security.
Run software-based firewall with access
control list policies to check the configuration of the running application which
may contain the financial records and keep updated your firewall. Also, use the anti-malware solution to protect your computer protect against viruses,
worms, Trojan horse.
7. Use
secure websites instead of an insecure one.
Make sure that you use an encrypted
connection, whenever you need to input any confidential data. Use https while
you enter the financial data or any confidential data. Check
the URL When you’re visiting a web page that needs you to enter
confidential data, carefully check that the address of the page that’s shown on
the browser corresponds with the page that you were intending to access.
8. Don’t
send personal data over the email.
Genuine financial organizations will never
send emails asking customers to Send personal data in an email, always check the
mail metadata and email header before proceeding and check twice before sending any personal
information of your credit/ debit card information.
Post a Comment