SECURITY
SECURITY RULES
Using modern technological means, the Bank reliably protects its UBB Online site against pending information security threats in the Internet. For maximum protection purposes, clients need to observe the rules below and apply certain measures that are thoroughly within their control.
Personal Computer Protection
- Please, install the recent operating system updates, published by the manufacturer.
- You should protect your computer with antivirus, anti-spyware and anti-malware programs, as well as update them on a regular basis and scan your PC with those.
- We recommend that the computer you use for online banking should be connected to the Internet through an additional network device with firewall protection functionalities.
System Access and
Secure Operation
- Please, keep your username and password at a safe place and do not disclose them to anyone. Do not write them down on paper, nor in a file or on any other storage medium.
- You should use a password consisting of uppercase and lowercase letters in combination with digits and of length not shorter than 6 characters. Please, change your login password regularly, at least once a month, from the Profile>> Change password menu
- Please, enter your username and password only in the online banking page at the following address: https://ebb.ubb.bg
Shielding against malicious software and measures for personal data protection
- You should never open directly a link to a web page, sent via e-mail. If, however, you still wish to open this page, the path should be directly typed in the address bar of your web browser. You should proceed in this manner since it is not clear what's behind the link in the message, while typing the path directly in the browser bar will open the genuine page.
- Some sites, displaying videos with misleading content, claim the need of installing additional files to enable content visualization. You should never install such additional files.
- Please, do not connect to Wi-Fi networks non-requiring access passwords. There are similar networks, designed especially for the purpose of phishing sensitive data during the connection process.
- You should pay special attention to opening links from unknown senders or URL addresses, sent as unsolicited bulk email (UBE).
- Please, do not accept unrequested files, sent to you by unfamiliar contacts, while using instant messaging software.
- You should never allow your browser to remember your user name and password for access to a certain site.
- Please, be especially careful when in a web site or with an e-mail you are requested to provide:
- Personal data, Personal ID Number;
- User names and passwords;
- Bank account numbers;
- Debit/credit cards numbers.
UBB will never request such type of information via an e-mail or in the Internet
- You should neither fill in such forms in unfamiliar sites, nor answer similar e-mail messages.
- When downloading files from the Internet and before using them you should, firstly, save them in the hard disk and then scan those with the anti-virus software.
- You should neither open e-mails from unknown senders, nor their attachments. Many viruses could be attached to an e-mail message and spread upon opening the attached file (viruses can be installed even via files in Word format). To play it safe, please, do not open attached files unless these are messages you expect.
- Your awareness of the techniques for phishing personal data, certification instruments and sensitive financial information is of utmost importance for your information security. To this end, please, find below a description of the most popular techniques:
-
Phishing
Online phishing aims at provoking the disclosure of personal or financial information, requested via an email or a web site. Most commonly the fraud unfolds with an email which resembles an official message from a trustworthy source, for example - a bank or a credit card company. The message may seem legitimate and may contain the institution's trade mark, while the email address may resemble that of the company on whose behalf the message is being sent. A link in the email routes recipients to a fake web site where they are incited to provide confidential information, for example a name and password for access to online banking, bank card number, CVV\CVC code etc. Subsequently, this information may be used for identity theft, entailing financial fraud and damage. Dear clients, please, DO NOT PROVIDE via Internet or telephone any confidential information, related to your online banking access or your bank card. This information is not needed by the Bank and under no circumstances will it be requested from you. In order to protect yourself from such fraud types you should pay attention to the sender's email address. We recommend that you should install anti-phishing filters to the browser, used by you.
-
Farming
This method also uses fake websites, however, no e-mail messages are sent. Farming is done by redirecting traffic from a particular web site to another one, which is a fake copy and aims at theft of secret information such as usernames, passwords, etc. Probably the user will be unaware of the fraud because he/she has typed single-handedly the website's address. Upon change of the "hosts" file in the victim's computer the malware could modify the file, thus stealing valuable information from the victim. To ensure a shield from such kind of attacks you should comply with the PC protection rules, described herein.
-
Voice phishing (Vishing)
This is a version of the phishing method where the emails contain a phone number and the users are recommended to call this number in order to confirm their user identifiers, or other confidential information. The email may also conceal a virus through which the fraudster may infect the victim's computer and obtain access to the data, including bank certificates.
-
Symptoms of a computer "infected" with malicious software
- The computer is running unusually slow, often restarts or is non-responding.
- The start of an antivirus program, a malicious software scanner fails or some of the system tools, including Task Manager, cannot be loaded.
- You cannot open particular web pages. Especially, you cannot open web pages, related to computer security, such as Windows Update site.