Security Tips
 Close Windows

 
Security Alert
Keep your password safe
 
Security Alert
  Notice on latest malware threat targeting internet banking and online trading users

We have discovered different variants of Spyeye malware that may affect the legitimacy of the DBSVefx trading website. This malware is designed to steal customers’ information by altering the “look and feel” of existing internet trading websites.

For instance, if the malware infects the customer’s computer, the DBSVefx website may look different and may ask the customer to key in his user ID, password and one-time pin from his token all at the same time, instead of the usual login method.

Customers are assured that the DBSVefx website remains secure and is not the source of this malware. Customers are reminded to remain cautious when trading online, and to protect your computer from being infected with such malware by using an anti-virus software and updating it with the latest anti-virus signature.

If you see the following message after you have logged in, your computer may be infected with this malware. "We are checking your security settings. Every step can take 1-10 minutes...."

You are advised not to proceed with any transaction until your computer has been checked and disinfected. Please call our DBSVefx Dealing Desk at (65) 6398 6099 should you wish to place orders.

If you suspect that your computer or your DBSVefx trading account have been compromised, please report it to our DBSVefx Technical Support Desk at (65) 6398 7221 immediately.

6 September 2011


Please be aware that fraudulent emails are being circulated to con internet banking users into revealing sensitive account information. This has affected a number of banks around the world.
  You can prevent this from happening to yourself.
   
  How it works
 

Such emails trick the recipient into thinking that they are responding to a genuine request because they are usually very convincing looking and are phrased to give the appearance that they were sent by the recipient's banker.

These emails usually tell the recipients that they are required to "update" or "validate" certain information via a hyperlink provided in the email. Unknowingly, they are directed to a web site that looks like the bank's, but is actually controlled by the fraudsters. Sensitive account information such as credit card information and User ID's & PINs entered on these sites are therefore revealed to the fraudsters. This is often referred to as "phishing".

For more information, just use any search engine and search for "phishing" or "email bank scams".

Preventive Measures You SHOULD Take

      * NEVER reveal your password to anyone. Be suspicious of any email asking you to provide sensitive         account information.
      * If you receive such emails, please verify with the sender stated but use a contact number that is known         to be genuine. Do not reply or click on the links in the email.
      * Disregard and delete spam, chain and junk emails.
      * Always type www.dbsvonline.com into your browser address bar or use favourites/bookmarks to         access our site.
      * Act quickly and call our Contact Centre at (65) 6327 9559 if you think you have been tricked.

Protecting your information is our top priority.

      * Please read Important Tips on How to Protect Your password
      * For more information on Security on the Net, please click here

Keep your password safe                                                                                                                             


Creating Your Password

      * Do NOT use special characters and space.
      * Do NOT use 3 or more consecutive identical characters. e.g. "333", "aaa", etc.
      * Do NOT use sequential characters. e.g. "123", "abc", etc.
      * Do NOT use consecutive keyboard characters. e.g. "qwert", "asdfg", etc.
      * Do NOT use your User ID as your password.
      * Do NOT use obvious passwords, such as initials, family names, company name, your date of birth, IC         number, telephone number or other numbers / letters that could be guessed or insecure.
      * Do NOT use passwords from other Internet sites.

Handling of Your Password

      * Don't disclose your password to anyone, including the DBS Vickers staff.
      * Don't allow anyone else to use your password.
      * Don't write down or record the password without disguising it, as this can easily lead to discovery and         compromise.
      * Don't associate your password with your initials, family names, birthdays, IC number, telephone number         or similar numbers as your password.
      * Change your password periodically, e.g. within 90 days or 3 months and the new password should be         different from the previous passwords.
      * Always remember to log off when you have completed your online activities with DBS Vickers.
      * Report to us immediately any actual or suspected misuse of your password and ensure that such a         password is changed without delay.
      * Beware of common social engineering attacks, e.g. people pretending to be a police or Bank staff to ask you         to tell them your password.
      * Make sure that no one is looking over your shoulder as you are typing your password.
      * Initial passwords given by DBS Vickers must be changed as soon as possible when the system is first         accessed. The original print copy of this given initial password should be destroyed.
      * Customers should not leave their online trading devices (e.g., computers) unattended if they are in the middle         of a session.
      * Exercise care in using the online trading devices if the computer used to access trading services is likely to         be shared with others. For instance, removing the temporary files that were stored in the memory or on the         hard disks of the customers' personal computers during usage of trading services, as the temporary files         may contain sensitive information of the customers such as account numbers.
      * Exercise caution if other password/account information detectors installed, as it is often very easy for         people to discover the data that you are entering.
      * Change your password if you feel uncomfortable of the security of your password.

You are responsible for transactions carried out using your password.

Choosing a Good Password

      * Customers must select a password that cannot be easily guessed by other people and does not conform to         a sequential convention. Examples of bad passwords are abcdefgh, 12345678, abcd1234, qwertyui,         22222222, 99990000, 11122233, 12341234, etc.
      * Wherever possible the customers should think of a password that means something to them, but not to         others.
      * Customers should not choose their passwords from dictionary words, foreign words or words derived from         dictionary words (e.g. backward words, like "drowssap" which is simply a backward spelling of the word         "password")
      * You may consider to choose your password by:

                  1. First choosing a phrase/sentence that is easy for you to remember (e.g. "DBS Vickers service                       needs strong password; for login")
                  2. Take the initials of each words or convert the word to a letter or number (e.g. substitute "for" by                       "4")DTWsnsp4l
                  3. Convert some characters (e.g. 'T' to '7', 'l' to '1', 'q' to '9', 'z' to '2'), and pick "D7Wsnsp41" as the                       password.

                                                                           Close Windows