The main types of cybercrimes related to internet banking include phishing and social engineering, malware and Trojans, credit stuffing, SIM swapping and phone hijacking, man-in-the-middle (MitM) attacks, fake banking apps and websites, account takeover fraud, ransomware targeting banks, and insider threats.
Phishing involves sending fraudulent emails, messages, or links that appear to come from legitimate banks, often tricking users into revealing their login credentials, credit card information, or personal details. Variations of phishing involve voice calls (vishing) and SMS messages (SMiShing) to deceive users into providing sensitive information. Once criminals gain access to an account, they can transfer funds, make unauthorized purchases, or steal the user’s identity.
Malware and Trojans are malicious software programs designed specifically to steal banking credentials. They can log keystrokes, capture screenshots, or redirect transactions. Man-in-the-Browser (MitB) attacks intercept communication between the user and the banking site, allowing attackers to modify transactions without the user’s knowledge.
Credential stuffing involves using automated tools to test large volumes of username and password combinations, often obtained from previous data breaches, to access online banking accounts. If users reuse passwords across multiple sites, attackers can easily gain access to bank accounts, leading to financial loss and account compromise.
SIM swapping and phone hijacking involve attackers using social engineering to trick mobile carriers into transferring a victim’s phone number to a SIM card they control, allowing them to bypass two-factor authentication (2FA) and gain access to bank accounts.
Man-in-the-Middle (MitM) attacks intercept communication between a user and their bank, especially over unsecured or public Wi-Fi networks. They can eavesdrop, alter data, or redirect funds.
Fake banking apps and websites are created by cybercriminals to mimic legitimate banking apps but steal login credentials. Account takeover fraud involves using stolen personal information or hacked credentials to take over a victim’s bank account, changing login details, and conducting unauthorized transactions.
To mitigate the risks of cybercrime in internet banking, both users and financial institutions need to implement robust security measures. These include using strong, unique passwords, enabling Two-Factor Authentication (2FA), being wary of phishing scams, regularly monitoring accounts, avoiding public Wi-Fi for banking, updating software and devices, and using verified banking apps.
#naijastreetmatters
