March News & Views Published Below

CU SECURITY & TECHNOLOGY News - Providing a brief summary of news and information related to security and technology issues for credit unions - Plus some interesting and fun web sites. Join us for our annual security conference in June. Here's the location.

https://www.cunews.com/infosec.htm

..

Stolen ID: 20 tips to protect yourself

You can take steps to protect yourself from identity fraud:

Keep your confidential information private. Your bank or credit card company won't call or e-mail to ask for your account information. They already have it.

Keep an inventory of everything in your wallet and your PDA, including account numbers. Don't keep your Social Security card or any card with your Social Security number, such as an insurance card, in your wallet.

Stop getting banking and credit card information in the mail. (See "Go paperless for safer banking.")

Monitor your bank and credit card transactions for unauthorized use. Crooks with your account numbers usually start small to see if you'll notice.

Keep your vehicle registration and insurance forms in a sealed envelope in your glove box and lock it and your car when at home or away.

If you conduct business online, use your own computer. A public computer is less secure, as is wireless Internet.

Look for suspicious devices and don't let anyone stand nearby when you use an ATM. Take your card and receipt with you. Keep your PIN in your head, not in your wallet.

Don't store credit card numbers and other financial information on your cell phone. (See "Is your cell phone spilling your secrets?")

If you're job hunting using resume Web sites, don't apply unless the employer has a verifiable address.

Protect your computer from vulnerability:

Keep system and browser software up to date and set to the highest security level you can tolerate. Install anti-virus, anti-spyware and firewall protection, and keep them up to date as well. When possible use hardware firewalls, often available through your broadband connection router.

If you use wireless Internet access, make sure that you get help from someone who understands wireless security when you set up your access point or router.

Back up your data and store it way from your computer.

Don't open e-mails from strangers. Malware can be hidden in embedded attachments and graphics files.

Don't open attachments unless you know who sent them and what they contain. Never open executable attachments. Configure Windows so that the file extensions of known file types are not hidden.

Don't click on pop-ups. Configure Windows or your Web browser to block them.

Don't provide your credit card number online unless you are making a purchase from a Web site you trust. Reputable sites will always direct you to a secure page with an URL starting with https:// whenever you actually make purchases or are asked to provide confidential information.

Use strong passwords: at least six characters, including at least one symbol and number, and no reference to your name or other personal information. Use a different password for every site that requires one, and change passwords regularly.

Never send a user name, password or other confidential information via e-mail.

Consider turning off your computer when you're not using it or at least putting it in standby mode.

Don't keep passwords, tax returns or other financial information on your hard drive.

Welcome to 419BAITER.COM, the land of extreme B.S.

Scamming the Scammers . . . http://419baiter.com/

To jump right in and see what this site is all about, click "The Games". Aside from some obfuscation of personal info (e-mail addresses and telephone numbers) and some text reformatting to improve readability, the e-mails depicted in these games are real and unedited in any way. Any spelling mistakes, bad grammar and adult language have been left intact.

A CAUTIONARY NOTE: Within the pages on this site, you are bound to run across some nasty language, photos, and voice/sound recordings which may be considered vulgar or offensive by some. While you certainly won't find any pornography on this site, some material on this site may offend some people.

Most of you have, at one time or another, received "Urgent Business Transaction" e-mails from someone asking for assistance in retrieving huge amounts of money in return for a good-sized percentage of the take. Maybe it's an e-mail informing you that you've won a lottery that you've never bought a ticket for. Maybe it's a job offer cashing checks in return for a commission.

These are known as Nigerian 419 e-mails. 419 scam baiting involves responding to these e-mails posing as a potential victim of their scam and getting them to trust you to the extent that they waste a lot of their time and hopefully some money trying to bilk you out of your hard-earned cash. With luck, the scammers also provide for a few laughs along the way.

This site is dedicated to this little-known but growing Internet sport.

These scams are named after section 419 of the Nigerian penal code which deals with this type of scam. However, Nigeria is certainly not the only country from which these e-mails originate. I have had these e-mails come from virtually every part of the world - Europe, Asia, Africa, Australia, UK, Canada, etc. This site will consider dealing with any type of advance fee fraud proposal that arrives by e-mail, regardless of its origin.

And it's not only poor and/or uneducated street criminals that perpetrate these scams. Many of these scammers are very well educated. Often bureaucrats are involved, either acting on their own or with the blessing (and even the support) of their corrupt government bosses, as demonstrated by these scam e-mails sent from a Malaysian government computer or this one sent from a Brazilian government computer.

You can find plenty of examples of some of the most popular formats along with explanations on the 419 Scam Examples page.

CUs warn of rash of automated phishing calls

Several credit unions nationwide are reporting an uptick in the number of automated phishing calls seeking to obtain personal information from members.

Some recent incidents:

1. Several Wisconsin credit unions report scam artists are using automated phone calls with recordings that ask members to divulge personal financial information, according to the Wisconsin Credit Union League. Phishing calls reported Tuesday claimed the member's credit and/or debit card had been locked and asked for the card number to unlock it. The Credit Union National Association also noted variations on scam tactics and said unsolicited requests for personal information have circulated under the subjects: "Account Deactivation," "Account Status Alert," "Changes to Terms and Conditions," and "Irregular Activity."

Click here to read about 9 other credit unions hit by phishers.
http://www.cuna.org/newsnow/09/system031809-6.html?ref=hed

Weight-Revealing Billboard Shames Fatties into Joining Gym

(Click on photo to see full picture)

Here we see the results of an ad campaign for the gym chain Fitness First. The bus stop seat has a scale inside, hooked up to a readout on the billboard. The idea is to shame overweight bus-goers into signing up, and we love it. The campaign was designed by Amsterdam based agency N=5, and ran in the Netherlands.

That last part is probably the most relevant. Can you imagine something like this running in the US? The company responsible would be sued out of existence in about five seconds, a class action lawsuit citing "psychological damage" or some such nonsense.

Worse, though, would be the result if this ad were to run in England. I can (quite seriously) imagine children (who should be in school) lying in wait with bags of cream cakes, ready to throw them at anyone over 200lbs who has the naivete to sit on the scale.
Fitness First "Bus Stop" [

Navy Federal Tweaks Anti-Robbery Policy

The biggest credit union in the U.S. has modified its policy on head coverings in branches to move the emphasis away from whether a member's head is covered to whether the member's full face can be seen.

The $36 billion Navy Federal's previous policy which required credit union members to remove head coverings when they entered credit union branches had led to complaints from a muslim female member who had been asked to conduct her transaction in a another room at the branch because she wore a head covering for religious reasons.

“The policy is that head coverings for religious reasons, cultural reasons, economic reasons are all acceptable, as long as we can see the members full face,” explained Tom Lyons, senior vice president for security for the Vienna, Virginia based federal credit union. “Our emphasis is on safety of our members and on preventing robberies and identity theft,” he said.

Lyons said the credit union had begun to implement the policy of asking members to remove head coverings and sun glasses when entering the branch as the economic downturn had begun to make robberies more likely.

The Starbucks Economic Indicator

The economic indiacator I monitor is the Starbucks at 290 & Spring Cypress Rd.

I pass there every Sunday @ 1:00 pm.Last Spring there would be 8-10 cars in line, now I usually see no more than two and sometimes none.

Another indicator is the advancing age of the workers at Starbucks, Papa Johns or other retail stores. 2009 is going to be a TOUGH year.

TOP TECHNOLOGY BREAKTHROUGHS

1) Wireless world
2) Defense technology
3) Alternative fuel vehicles
4) Biotechnology
5) Computers
6) Lasers
7) Genomics
8) Global finance
9) Processors
10) Digital storage
11) Space
12) Fiber optics
13) Satellite TV & radio
14) DNA testing
15) Video games
16) Biometrics
17) Energy and water savers
18) Scanning tunneling microscopes
19) Batteries
20) E-baggage
21) Remote controls
22) Animal cloning
23) Manufacturing technology
24) The big picture
25) Weather technology

Hoax Busters - the BIG LIST of Internet Hoaxes

An alphabetical list of Internet hoaxes, scams and chain letters. If it's on the list, it's a hoax. Please, if any doubt, check it out. - http://www.hoaxbusters.org.

Harland Announces UltraData, Cavion Signings

Harland Financial Solutions said several more credit unions are now using its UltraData Enterprise core processing solutions.

That includes $1.2 million Genisys CU of Auburn Hills, Mich., which is the result of a recent merger between T&C FCU and USA CU. T&C already was an UltraData user.

The Lake Mary, Fla., company also said $103 million Bull Dog FCU will go live with an in-house UltraData platform on March 1. The Hagerstown, Md., credit union now is an Open Solutions customer, according to its 5300 Call Report. Meanwhile, $14 million Syracuse Cooperative FCU in New York will convert to a service bureau core processing relationship with UltraData. It currently is a CompuSource Systems client, according to NCUA records.

Two Huron, S.D., credit unions–$13 million Huron Area FCU and $3 million HB Telco FCU–will be converting from HFS’ CuServ platform to UltraData enterprise in a service bureau environment, the company said.

More than 550 credit unions now run UltraData, including more than 200 through the company’s service center in West Des Moines, Iowa.

The company also said it has signed 119 new users of its Cavion Internet Banking service in 2008 and 42 users of its Cavion Mobile Banking Professional service since it was launched several months ago.

Register 1 and Send More At No Cost

St. Louis, January 30, 2009 – William Rogers & Associates, sponsor of the CU InfoSECURITY Conference, announced that they are reducing their previously announced conference fee from $895 to $795. The reduction was brought about in discussion with the conference host site, MonteLago Village Resort at Lake Las Vegas, and as way to help credit unions receive much needed security information during these difficult economic times.

We have also announced a special registration. Register 1 person at the regular rate of $795 and send others from your credit union at no extra cost. The extra persons will be responsible for their lodging. That's it. The dates are June 4-5, 2009.
..

Conference Manager Bill Rogers said, “We’re pleased to pass this savings on to our conference attendees. This makes the conference even more valuable and affordable.” Rogers adds that “the conference registration fee includes two free nights lodging at a beautiful 5 star resort – a unique feature that only we offer to further help credit unions afford this one of a kind conference.” The CU InfoSECURITY Conference is the only conference in the credit union movement offering two nights lodging as part of their low conference fee.

Rogers added, “This is our 8th annual conference focusing on security issues facing credit unions. Security continues to be a top of mind issue for credit unions of all sizes. With over a dozen security expert speakers, a security tour of a Las Vegas credit union for pre-conference attendees, vendor exhibits and two nights free lodging, this makes for an outstanding program. It’s the best value in the credit union movement.”

The conference agenda, registration and more information is available at: https://www.cunews.com/infosec.htm.

February News & Views Shown Below

CU SECURITY & TECHNOLOGY News - Providing a brief summary of news and information related to security and technology issues for credit unions - Plus some interesting and fun web sites.



(Click on all photos to enlarge)