How is a bank password stolen?

[Hacker]

This article was written for educational purposes only. We do not call anyone to anything, only for information purposes! The author is not responsible for your actions

The bank password can be stolen both by an intruder and by a person familiar to the victim who has gained access to the password or to the victim's device where it is stored, the director of the Center for Expertise told Prime

There are several ways to leak user credentials:

• password guessing by an intruder due to his weakness for cracking;
• entering credentials on a phishing site or in correspondence;
• negligence in storing password information (recording on paper, saving in a browser on a shared computer, etc.);
• hacking or malware infection of the victim's device, on which the password is entered or stored;
• obtaining a password personally from a victim using social engineering methods, the expert listed.

At the same time, he notes that in most cases, an attacker cannot steal a password without the assistance or negligence of its owner.

"To protect banking data, you need to follow all the basic rules of information security hygiene. From the point of view of creating and using passwords, it is important, at a minimum, that the password is complex, non-dictionary and does not contain information about you or the place where it was created, "says Solenik ...

In addition, the password must not be a dictionary password, that is, so that it cannot be found in the dictionary of Russian, English and other languages, the password must be unique and not used on other services. Also, the password must be changed from time to time - at least once every one to three months, the expert advises.

It is optimal if the password is composed of several random words with specially made mistakes or substitution of characters, and it is used only for this important site. For example, "Black! Magnet", "he says.

Solenik also recommends that you always check the address of the site where the password is entered, do not go to the bank's personal account using untrusted links, and do not get tempted by mail or phone.

“Remember that your password or PIN-code does not know and should not be known by anyone except you - not even bank employees or relatives! And just do not create prerequisites for someone other than you to recognize it, ”the expert concluded.