The bank is at risk of being

Banks are not afraid to build "inviolable" security fences against hackers, but they forget a greater risk: getting their employees to collect customer information.

As long as employees or consultants are hired to have access to the banking system, the game is over, said Carmen Oveissi Field, director of a security consulting firm.

Effortlessly opposing the enemy

Never before has the battle against identity theft been fierce.

Banks, especially in Europe and the US, have invested tons of money to ensure their systems are not loophole. They also constantly warned customers about the risk of being tricked into disclosing account information.

Source: Infoworld One of the most sophisticated and popular phishing techniques is "phishing", in which criminals distribute cleverly crafted emails, trying to lure users into a fake bank website and make them login.

Once a user is deceived, they consider losing their username and password to access their account. Criminals will use this information to spoil their accounts online.

Many banks have posted phishing warnings on their home pages and urged users to forward suspicious emails to them, from which they could identify ghost websites and close them.

This is necessary, because if you let phishing go on a rampage, the public's faith in online banking and e-commerce will be severely reduced. At that time, even if it was a simple, less important banking transaction, customers would rather go to the local bank branch.

. But forget "enemy in"

Although very confident in dealing with the risk of phishing, banks recently stumbled on the risk of decent data . going out with the front door.

" Data theft can take place in two ways: either hack into the banking system, or install your people to work. The second situation is really worrying ," a security director of a major European bank revealed, on condition of anonymity.

The fact that some banks implement outsource data management policies for outside companies makes the problem worse. The risk of "inside hands" gulling information is even more difficult to prevent.

" There are too many weak links ," said Oveissi Field. " The back-up tapes of data are brought to (or mailed) to the storage center. Just if the person doing the job or being careless, or having a dark idea, everything is broken ."

The most typical of these risks is the incident at Japan's Sumitomo Mitsui bank branch in London last year. The thief disguised himself as a cleaning worker and almost succeeded in stealing more money . $ 400 million.

They have installed keyboard tracking software (keyloggers) on international money transfer management computers. After analyzing the identity of the user and the password that the keylogger has recorded, they use that information to perform a huge money transfer mission, with the destination being a bank in Israel. Fortunately, the plot broke down at the last minute when the police found out.

Trong Cam