Beware - Fake DBS Internet Banking Website

[kenntona]

Fake DBS internet banking website. Note that the DBS logo is different ...

http://www.dbsonlineservice.com/sg/personal/default.htm

Cheers

[emiffy]

Always check that the "lock" logo is on, and in the tool bar, it should read "https://" and NOT "http://".

Don't be a victim!!!

[ryan]

Originally Posted by emiffy

Always check that the "lock" logo is on, and in the tool bar, it should read "https://" and NOT "http://".

Don't be a victim!!!

SSL (a.k.a the lock) can be implemented by any service...so it's no point even if you see the lock. I can set a temporary SSL certificate on my domain.

What's more important is that you check the source of the lock by double clicking on it. And checking it comes from good sources, Verisign (DBS), Geotrust, Nettrust...etc.

[T6]

Originally Posted by ryan

SSL (a.k.a the lock) can be implemented by any service...so it's no point even if you see the lock. I can set a temporary SSL certificate on my domain.

What's more important is that you check the source of the lock by double clicking on it. And checking it comes from good sources, Verisign (DBS), Geotrust, Nettrust...etc.

Fully agree with what Ryan mentioned. I attended a talk 2 weeks back by the MAS security chap and he confirmed that the "lock' insignia is no guarantee. Gotto check whether valid certs etc. Damn chim.

[hackzi]

This is known as phishing... where a rogue site is set up to look like the actual site with the aim of collecting unwary users' login credentials, credit card details, personal data, etc. Often, unsuspecting users are directed to these rogue sites when they click on URL links contained in emails which purport to be from the actual company, e.g. claiming that there's an action required of the user. Note that these emails often look legitimate - complete with company logos and signatory, etc!

As what Ryan said... anyone can get a digital certificate for his/her site. The yellow lock only indicates that the site is SSL enabled - provides confidentiality and integrity of data in transit, and certifies (usually thru a trusted 3rd party CA like Verisign, Entrust, etc.) that the site is indeed who it says it is... in this case, it's www.dbsonlineservice.com. The problem here is that the "dbs" makes one think he/she is indeed accessing a DBS site.

Be wary when you receive any suspicious emails seemingly from your banks, etc. When in doubt, give the bank or company a call to verify the authenticity. Careful when you click on any URL links (e.g. in emails, web pages, etc.) too. Also, don't trust what you see on the browser's address bar ... it can be faked! Best is to type in the URL yourself.

In essence, end users like us also need to practice due diligence in order to protect our personal assets. User awareness is key here... just my 2 rupiahs worth... ops:

[T6]

For myself, I always play save and type in the url of the bank I wanna go to. I will not click on quick or unfamilar links to a bank. E.g. for DBS, I always type dbs.com and let that site take me to it internet-banking site.

[blackbmw]

Originally Posted by kenntona

Fake DBS internet banking website. Note that the DBS logo is different ...

http://www.dbsonlineservice.com/sg/personal/default.htm

Cheers

Hmmm strange ler,,,i key in my usual USER ID : ChxxChxxByx
Password : ChxxChxxByxYou

cannot access ler and it will prompt me Invalid ID, this website is definitely a fake one.

[Orh LuLu]

Originally Posted by kenntona

Fake DBS internet banking website. Note that the DBS logo is different ...

http://www.dbsonlineservice.com/sg/personal/default.htm

Cheers

Huhhhh.... "Damn Boh Security" again........

[gwumpkus]

i just got anther one from Ebay...it looked like the real damned thing..even addressed me by name some more!!!..i got suspicious cos it wanted me to update my details by entering credit card info thru the pseudo-ebay website...but when it took me there via a link, i didnt even have to sign in to update!!..got suspicious, checked with ebay...turns out to be a fraud...constant ebay users, pls lookout..its not the first one i got already...:P

cheers!

michael

[ryan]

Guys,

Just as a tip to everyone, remember, make it a HABIT, before purchasing anything ONLINE..

Double click the SSL lock key and view the details of the certificate. Check the authenticity and if you must, check out the URL of the issuing SSL certificate to see whether they are legit.

A bit drama, but saves you the trouble of getting trouble with fake sites.

As you can see, the issuer of DBS is Verisign.

Check out the properties of the cert with regards to other details.

SSL provides a secure channel. If this channel is broken for whatever reason (page redirection to another fake server), your browser *should* warn you straight away.

However...most pay-per-view porno sites are quite safe...well...most of them .