Cyber Security Tips

You are here :

General

Cyber Security Tips

Spin N Learn

Do Your Part #BeCyberSmart.

Cyber Security is everyone's Responsibility.

Cyber Security Awareness through Interactive online Fun game 'Spin N Learn'.

Happy Learning with Fun !!!

Please Click Here...

Anydesk App Warning

Anydesk App warning: How fraudsters may lure you

After the Reserve Bank of India (RBI) warned banks and customers against the use of AnyDesk App, the Union Bank Bank is also warning its employees about the same. In personal messages to Union Bank employees, the bank has informed, “Do not download “ANYDESK” from Playstore or any other source, which Fraudster can use to take control of your mobile device and carry out transactions.

You may receive a phone call from a fraudster, who will claim to be a representative from a tech company/bank offering to fix issues in your smartphone or mobile banking apps.
The fraudster will then lure you to download a mobile app like 'AnyDesk' from Play store or App Store, which can provide him with remote access to your mobile.
Post the installation of the app (in this case 'AnyDesk'), a 9-digit code will be generated, which the fraudster will ask you to share.
Then the fraudster will further ask you to grant him certain permissions. Once granted, the fraudster is now in control of your mobile device.
Further, Mobile Banking credentials and PIN are vished (stolen) from you and the fraudster can now choose to carry out financial transactions from your mobile app which was already installed.
The fraudsters also forward one SMS to you and advise you to forward it to a specific mobile number from your phone. On the basis of this, the fraudster is able to link/register your mobile number/account with UPI on his own mobile device.
The fraudster subsequently seeks confidential account related credentials like Debit Card number, PIN, expiry date, OTP and sets the MPIN which is then used to authenticate transactions.
Sometimes, the fraudsters could also send “Collect request" to your VPA and ask you to approve/authenticate it on the respective UPI apps to get reversal/refunds. Assuming that you will get credit/refund in your account, you approve the request by authenticating the transaction with MPIN [which is only known to you] but you might end up losing money since your account gets debited once the collect request is approved/authenticated.

Do's and Don’ts you should follow:

Be alert to fraudulent calls (vishing) that ask you to download apps or share confidential information (disconnect such calls immediately)
In case you have already downloaded “AnyDesk” app and it is no longer required, uninstall it

IMMEDIATELY

Please enable app-lock on your payment or mobile banking related apps.
Report any suspicious activity at your nearest Bank Branch / genuine customer care number only
Do not share your banking passwords or store them in your mobile handset.
Do not share your other sensitive financial details on call such as UPI PIN / MPIN, Debit / Credit Card, CVV, expiry date, OTP, ATM PIN, bank account details, etc.
Don't allow a stranger to guide you to install a mobile app through App Store / Play store, or instruct you to change the setting of your mobile.
Do not rely on customer service numbers of various merchants/entities/ banks etc. retrieved via Google search, since they can be fake.
Do not forward any unsolicited SMS received on a request of so-called representative from a tech company/bank

Please be aware of the following:

PHISHING E-MAIL

INTERNET SECURITY

BROWSER SECURITY

WI-FI SECURITY

DESKTOP SECURITY

PASSWORD SECURITY

Do use hard to guess Passwords
Do not use same password for all Accounts
Do not write passwords anywhere
Do not use personal information as password e.g. DOB, Name, Mobile No…
Passwords should be unique from previously used passwords.
You are responsible for the work carried out in your User ID. It is your digital identity
Passwords should be created so that they can be easily remembered

CREATE AN ALTERNATE EMAIL ADDRESS

Instead of using your primary email address for every online account, create an alternative email address for public-facing accounts and users

DON’T GIVE AWAY ADMIN RIGHTS

When a new software or app is asking for system admin rights check the access it’s asking for, look in documentation for reasons why, and contact a support team if possible

CREATE A SECURITY PLAN

Create a checklist for yourself of do’s and don’ts, reminders for regular backups and updates. Please read Cyber security Policy, Information Security Policy & CISO office Circulars.

BE CARD SMART

Don’t save your card information when you purchase something online or on an app

KEEP RECOVERY INFORMATION CURRENT

Check and update the recovery email addresses, phone numbers, and physical addresses associated with your accounts

DON’T CLICK LINKS FROM SUSPICIOUS SOURCES

Avoid clicking short links from unknown or questionable sources

MONITOR ACCOUNT ACTIVITY

Track the activity logs for your accounts on regular basis

CHECK YOUR EMAIL ACCOUNTS

Go through all your email accounts, delete what you aren’t using anymore and set up stringent security measures for the accounts you want to keep

BACK UP YOUR DATA

Back up your data frequently and in multiple locations to protect your critical information

UPDATE YOUR SOFTWARE

Make sure any software you use on your personal computer is updated regularly.

DISABLE AUTO-CONNECT

Make sure your Wi-Fi auto discovery functions and Bluetooth is off when you are travelling or in public.

CONTROL MOBILE APP ACEESS

Get into the habit of not installing any app unless they come from the official app store

REVIEW YOUR PASSWORDS PERIODICALLY

Make sure they are strong and contain an assortment of characters and change them regularly.

REGULARLY UPDATE YOUR BROWESERS

Make sure you’re using the latest versions of your Internet browsers and any related plug-in.

PROTECT YOUR SYSTEMS

Carefully vet antivirus, firewall, and ad-blocker solutions are patched and updated on regular basis

SET UP 2FA (TWO FACTOR AUTHENTICATION)

Make sure to link your accounts to your cell phone and/or emails address to verify tour identity when you sign in

Internet Banking

Menu