If you use POSB/DBS iBanking alot, then it would be good if you read up about DBS & POSB phishing sites which are designed to steal customer IDs, Pins and one time passwords so as to avoid falling victim to these sites.

POSB Phishing Site Alert

There is a POSB phishing site found on the Internet which pretends to be the POSB Internet Banking website. The website http://home.e-posbsg.com/index/personal/Pages/default.html is a phishing site posing as the POSB Internet Banking website, designed to steal customer IDs, Pins and one time passwords.

Customers are reminded to refrain from providing any confidential information. Remember,

• POSB will never ask you for your PIN number, via email or phone.
• Always type in the URL of POSB website directly into the address bar of your browser.
• Alert us immediately, if you notice unknown transactions appearing on your account.
• Never reply to unsolicited emails.

Customers are also encouraged to use the latest versions of internet browsers available, which may provide advanced security features such as anti-phishing and forged website identification. If such features are available, customers are advised to turn them on.

DBS Phishing Site Alert

An ongoing phishing campaign is targeting DBS customers. In this campaign, an email will be sent to DBS customers, informing them that the DBS internet banking system will be upgraded and that they should click on a URL inside the email. This URL brings customers to a phishing website which pretends to be the DBS Internet Banking website, designed to steal customer IDs, PINs, one time passwords and contact information. Customers may also receive a call pretending to be from DBS, and request for your iB Secure PIN or informing you of transactions that you did not perform being cancelled/stopped. The phishing websites may be using various different URLs; examples are provided below.

• http://www.theheatstore.nl/catalog/admin/Update/index.php
• http://96.127.154.90/~kctasman/Update/index.php
• http://villagebeads.co.nz/Update/index.php
• http://www.arkmodel.com/DBS/
• http://www.swordexperts.com/DBS/

A sample of the phishing email and the phishing website are provided for reference.

Customers are reminded to refrain from providing any confidential information. Remember,

• DBS staff will NEVER ask you for confidential information via email or phone, for example:
  • PIN or iB Secure PIN;
  • Token PIN; and
  • One Time Password or Challenge and Response Codes.
• Always type in the URL of the DBS Internet Banking website directly into the address bar of your browser, and check that the website you are accessing is the valid DBS Internet Banking website:
  • DBS iBanking – https://internet-banking.dbs.com.sg
  • DBS iDEAL – https://ideal.dbs.com
• Call us immediately at 1800 111 1111 (Personal Banking) or 1800 222 2222 (Business Banking), if you notice unknown transactions appearing on your account.
• Always review the SMS alerts from DBS and call us immediately if you receive any suspicious SMS.
• Never reply to unsolicited emails.

Customers are also encouraged to use the latest versions of internet browsers available, which may provide advanced security features such as anti-phishing and forged website identification. If such features are available, customers are advised to turn them on. It is also prudent to install the latest released anti-virus signatures and operating system/internet browser security updates.

Taken from: DBS iBanking Security Alerts

Yepp, so take note and don’t fall for these phishing sites ya?

Don’t forget to stay tuned to my blog / like my blog’s Facebook page / follow me @mitsueki on Twitter & Instagram for the latest updates!

Till later,
♥ mitsueki

Like my blog on Facebook!
Follow me on @mitsueki on Twitter & Instagram