Secure Your Devices From Malware | OCBC Malaysia

#BeAProAgainstCons with OCBC's security measures and anti-scam tips

Back

Malware threats

Learn to safeguard your financial data against malware attacks

请阅读本文的中文版本

WHAT IS MALWARE?

Malware is a type of malicious software that cybercriminals use to infect their target's computers and mobile devices to perform criminal activities.

Once the device is infected, a cybercriminal may steal confidential data such as login credentials (including online banking access code, PIN and One-Time-Password (OTP) or Organisation ID, User ID, and Password) and use these details to conduct fraudulent money transfers from their victim's account. Others may gain remote control over the compromised device and data, spy on a person’s online activities, and/or perform other criminal acts like monetary transactions and fraud without their victim's knowledge or consent.

TYPES OF MALWARE

Understanding the different types of malware and how they work can help to protect your devices from threats.

HOW IS MALWARE SPREAD?
Phishing emails

Phishing emails

A common method is to send emails with attachments that may appear to originate from trusted sources or people you may know. If you open the attachments, you may end up installing malware on your computer.
Suspicious websites

Suspicious websites

Visiting malicious websites may result in harmful software being installed onto your device without your permission. These spoofed sites often appear to resemble credible websites from established companies, but exist solely to inject malware and steal data.
Infected downloads

Infected downloads

Malware can be spread by downloading infected files, which are delivered through messaging services such as SMS, WhatsApp and Telegram. It can also be easily spread through fake software and mobile app downloads from non-official sources, or via removable drives once they are connected to a computer.
Malicious ads

Malicious ads

Cybercriminals can spread malware by injecting corrupted code into online ads, which are then distributed through legitimate advertising networks and displayed on various trusted websites. You don’t even need to click on the ad – malware is automatically installed once you visit the host site.
LATEST SCAMS TO WATCH OUT FOR

From deceptive bargains to bogus QR codes, here are some malware-related scams to take note of.

HOW TO DETECT MALWARE?

If you believe your computer or mobile device may be infected with malware, watch out for these warning signs:

  • On your device
    • Look out for unfamiliar apps and icons that appear on your device which you did not install, an unusual change in the look-and-feel of your device's screen, or suspicious screen pop-ups that prompt you to install unknown apps or grant special permission to specific apps.
    • Performance issues including applications, files and websites taking a long time to load, abnormal battery drainage, and problems shutting down or starting up your device due to malware running in the background.
    • Device shutting down abruptly or getting locked up with the screen displaying the message 'System update in progress' even after it has force-restarted.
    • Dropped calls or strange disruptions during a conversation which could likely be due to interference of mobile malware.
    • Unusual phone/data bills as a result of malware sending SMS text messages to premium-rated numbers.
  • In your browser
    • A redirection to a third-party website showing a fake overlay page resembling OCBC Bank’s login page, which may prompt you to enter your login credentials, OTP from your security token, or your ATM, debit or credit card details. The website may also feature a fake hotline number (a number that does not match the contact numbers on the Bank's official website).
    • The URL shown on the fake website’s login page is different from OCBC’s official pages.
    • You are prompted repeatedly for your login credentials despite entering them correctly, or get a delayed pop-up screen that says the system is not available and repeatedly asks you to enter OTP or use your security token to generate an OTP.
    • You receive SMS text messages on OTPs you did not generate, or are prompted to authorise transactions that you have not initiated.