Stay Secure

• Avoid using public terminals (such as Internet cafes) for Internet Bańking.
• Be aware of the higher risk of interception during a wireless connection. Only do your Bańking via a wireless hotspot if you are certain of the integrity of the connection.
• Ensure that you have an updated anti-virus and spyware programme and perform regular system scans.
• Login to Ońline Bańking or Ońline Bańking Enterprise™ and download Webroot® SecureAnywhere™ for FREE.
• Never access the site via a link. Rather type the address into the browser address bar or save the address as a 'Favorite'.
• Do not open other websites while logged into Internet Bańking; only have a single browser window open.
• Choose a User ID and password that cannot be easily guessed and change these regularly.
• Ensure your computer software is up-to-date.
• Check for the padlock in the lower right of your browser window (it indicates a secure site). You can click on this padlock to verify the site "owners".
• When you complete your Ońline Bańking tasks, log off and close the browser window.
• Never provide your password over the Internet (by email) or over the telephone to anyone (including persons identifying themselves as Bańk officials).
• Don't trust a PDF payment proof unless verified by the Bańk - these documents can be manipulated by fraudsters.

Anti-spyware program

This is a program that protects your PC against spyware and helps to keep your computer and personal details secure. e.g. Webroot® SecureAnywhere™

Browser

Browser software provides you with the means to view a webpage. Without browser software, you would not be able to surf the Internet.

Cookies

This is a collection of information, usually including a username and the current date and time, stored on the local computer of a person using the Internet. It is used by websites to identify users who have previously registered or visited the site.

Encryption

Encryption converts data into an encoded form before it is sent over the Internet. This prevents unauthorised access to the information. At FNB, we use 128-bit Secure Socket Layer (SSL) encryption to secure your information.

Firewall

Any of a number of security schemes that prevent unauthorised users from gaining access to a computer network or that monitors transfers of information to and from the network or personal computer.

Identity theft

This is the crime of obtaining the personal or financial information of another person for the purpose of assuming that person's name to make transactions or purchases.

Keystroke logging

This involves the capturing of information that you type on the keyboard by installed hardware. This is often used by fraudsters to capture personal details including passwords.

Secure Socket Layer (SSL)

This is a protocol that provides a high level of security for communication over the Internet.

Spam

Unsolicited email, often of a commercial nature, sent indiscriminately to multiple mailing lists or individuals.

Spyware

This is software that secretly gathers information about a user while they navigate the internet.

This information is normally used for advertising purposes. Spyware can also gather information about email addresses and even passwords and credit card numbers.

Trojan horse

This is a program that disguises itself as another program. Similar to a virus, these programs are hidden and cause an unwanted effect. They differ from viruses because they are normally not designed to replicate like a virus.

Computer Virus

A computer virus is a piece of code that is secretly introduced into a system in order to corrupt it or destroy data. Often viruses are hidden in other programs or documents and when opened, the virus is let loose.

Worm

This is a special type of virus that spreads without any user interaction, typically by exploiting a flaw in popular software.

• If you are using a PC and need to walk away from it for any reason, log off or lock your workstation.
• Select passwords that would be difficult for others to guess and change them frequently.
• Do not give your password to anyone, or leave written notes with your password near your machine.
• Report any suspicious activity on your PC to the appropriate person.
• Login to Ońline Bańking or Ońline Bańking Enterprise™ and download Webroot® SecureAnywhere™ for FREE.

Your system has identified itself as:

• Any email is at risk of being intercepted, and you should never send sensitive information (passwords, etc.) via email.
• Tips to staying safe:
• Do not provide your email address to third-party websites, without understanding how your email address will be used.
• Never send sensitive information via email.
• Avoid opening unidentified email messages with attachments.
• Webroot® SecureAnywhere™ can assist to protect your credentials when online.

• When you visit a website (especially a transaction website) you should look for a padlock in the browser window.
• The padlock indicates that you are in SSL (secure socket layer) mode, which means that every request or information that you send from the browser to our secure site is encrypted (scrambled and encoded).
• FNB uses Entrust Digital Security to encrypt information.
• The Entrust Site Seal makes it possible for our Ońline Bańking customers to transact and share information free of worry.
• To view the Identity shield status or to disable the Identity shield:
  • Open Webroot SecureAnywhere
  • Click the Identity & Privacy tab.
  • Click Identity Shield on the left.
• The Identity Shield panel opens. The green button indicates the shield is on. We recommend that you keep the Identity Shield enabled; however, you can disable it by clicking the green button.

• A browser is a type of software that enables you to surf the web. There are many kinds of browsers and the FNB website is designed to be accessible via all main web browsers and browsing devices.
• We recommend that you use the latest version of your preferred browser. The most up-to-date version of your preferred browser is normally available as a free download from the relevant browser manufacturer's website.
• The latest versions of browsers are more secure than older versions, which is particularly important when doing your Bańking via the Internet.
• Most Windows-based PCs are preinstalled with Microsoft Internet Explorer (IE), therefore it is the most commonly used browser. Because of this, IE is the browser most attacked by viruses and spyware.
• If you use IE it is particularly important to run a virus scanner regularly and keep it updated with the latest security patches from Microsoft.
• Other good browsers for Windows PCs, such as Opera and Mozilla Firefox, are available free of charge.
• Webroot® SecureAnywhere™ assists to protect your browser i.e. your entire online experience.

• Browsers can remember or cache information, that being a page or an image from a website.
• This makes Internet surfing quicker because when you return to a web page, the browser can present a stored page without having to request the page from the server again.
• For security, all FNB Ońline Bańking pages are delivered with instructions to the browser not to cache (remember) the information.
• While most browsers obey these instructions, Internet Explorer (IE) ignores them and under certain circumstances you may view a cached page of information.
• Webroot SecureAnywhere to view the Identity shield status or to disable the Identity shield:
  • Open Webroot SecureAnywhere
  • Click the Identity & Privacy tab.
  • Click Identity Shield on the left.
• The Identity Shield panel opens. The green button indicates the shield is on. We recommend that you keep the Identity Shield enabled; however, you can disable it by clicking the green button or make sure that IE has the following settings:

>Tools > Internet Options > Advanced > Do not save encrypted pages

>Tools > Internet Options > General > Settings > Automatically

>Tools > Internet Options > Advanced > Empty Temporary Internet Files folder when browser is closed.

• From time to time, weak spots are discovered in programs running on your PC. The vendor would then release a patch to fix this weakness.
• To check for patches and weaknesses, visit the vendor's website on a regular basis.
• Login to Ońline Bańking or Ońline Bańking Enterprise™ and download Webroot® SecureAnywhere™ for FREE.

Believe it or not, to make your Ońline Bańking experience more secure, our system will block you from entering a password that is too simple. Read our password rules below:

• Passwords must be a combination of upper and lower case letters, at least one special character and one number.
• Passwords must be a minimum of 7 characters and not exceed 30 characters.
• The same character cannot be used consecutively, e.g. aardvark.
• New passwords cannot be the same as the previous 12 versions.
• Passwords must not be similar to User ID.

• A virus is a malicious program that can destroy data on your computer and slow your computer's performance.
• Viruses are often received via email and to protect your PC, you should install anti-virus software and run regular scans and remember'
• Make it a habit to never open email attachments from unknown sources.
• Be cautions when downloading and running programs, as they may contain unsecured data, which cannot be filtered by firewall or anti-virus software.
• Webroot® SecureAnywhere™ works on top of any anti-virus software and alongside all other security products that you may already be using. However, unlike anti-virus software, it is designed to protect login details such as your User ID and Password, as well as other personal credentials like your name, ID number and Bańk account details when Bańking, shopping and social networking online.

• If you think that no one would be interested in your personal information, think again. In the wrong hands, it can provide unauthorised access to your accounts and credit card.
• Identity theft happens when a criminal obtains your personal information to steal money from your accounts, open new credit accounts, apply for loans, rent apartments and commit other crimes - all using your identity.
• These acts can damage your credit rating, leave you with unwanted bills and cause countless hours of frustration to clear your name.
• How do they do it? Fraudsters phish, they spoof, they log keys , engineer socially and organise 419 scams.
• Webroot® SecureAnywhere™ Identity Shield protects you from identity theft and financial loss. It ensures that your sensitive data is protected, while safe-guarding you from key loggers, screen grabbers, and other information-stealing techniques.

• File-sharing occurs when you download software that connects your PC to an informal network of other computers running the same software.
• By doing this, you can share information (music, games and software) with millions of users.
• Sounds tempting, but you should be aware of the risks. By downloading this software, you could unwittingly allow access not just to the files that you intend sharing, but also to confidential information on your hard drive.
• You could also unintentionally download material protected by copyright, or pornography labelled as something innocent.
• For full protection from screen grabbers, information-stealing Trojans, and other threats, make sure the browser window is in the foreground and the padlock is displayed in the tray icon. If the Identity Shield encounters a website that may be a threat, it opens an alert. You can decide whether you want to stay secure (click Block) or continue despite the warning (click Allow).

• In simple terms a firewall monitors for outside attempts to access your system and blocks communication from specified sources.
• Some operating systems (like Windows) come with a built-in firewall.

• Spyware is a type of computer program that is installed on your PC without your knowledge or consent. This is done either by tricking you into installing the spyware or by someone who has access to your computer.
• Spyware is designed to steal personal information such as your Bańking login details (your username and password). The spyware then sends this information onto the criminal. Spyware can steal more than your Bańking information and can be used to steal your email, instant messaging and monitor websites that you visit.
• Spyware is designed to evade detection. This means that your anti-virus will not necessarily detect it. In addition some products only detect underground spyware and not commercial spyware.
• To keep yourself safe, do not run applications sent to you in an email.
• Do not respond to tweets or messages on other social networking sites from people you don't know, especially those enticing you to download software.
• In addition run an anti-spyware program to detect and protect you from spyware.
• Keep up to date with the current scams going around that try to get you to install spyware.
• Make sure you understand the protection options offered to you by FNB and use them to maximize the protection on your account.
• Webroot® SecureAnywhere™ prevents spyware from stealing the user's login details on any secure site including, but not limited to, Ońline Bańking. This includes login to sites such as SARS eFiling, web mail and social network sites such as Face Book and Twitter.

• Criminals use various different means to commit fraud at ATMs. For example, they could jam the machine and then try and appear helpful with the intent of getting hold of your card and PIN.
• Remember, a criminal must have both your card and PIN to be able to draw money from your account.

Stay safe and remember:

• Avoid using ATMs in secluded areas
• If you feel unsafe at an ATM, return later or use another machine
• Only enter your PIN when the ATM screen instructs you to
• Stand close to the ATM and block the view with your hand
• Never write the PIN on the card
• Always check that you get your card back from the machine
• Don't count your cash at the ATM

If you use a credit or debit card to shop online, remember the following pointers:

• Only provide your card information to reputable companies and for single purchases.
• Check that the site is a secure shopping site - indicated by a padlock in the bottom right-hand corner of the browser.

• If your personal details change, please tell us.
• If you cancel a card, destroy it by cutting it up.
• Keep your Bańk statements and cheque books safe.
• Shred sensitive information.
• Read your Bańk statements.

Symantec Security Response

http://www.symantec.com/security_response/index.jsp

Vulnerabilities

http://www.symantec.com/security_response/threatexplorer/azlisting.jsp

Threats and Risks

http://www.symantec.com/security_response/vulnerabilities.jsp

Security for the Real World

http://www.mcafee.com/

Recently Discovered Viruses

http://us.mcafee.com/virusInfo/default.asp?id=recentlyDiscovered