Security Links

Additional Resources
FMFCU Security Info

FMFCU Security Center | Alerts

CURRENT ALERTS

ASSURANCE ABOUT THE "HEARTBLEED" BUG

April 14 - FMFCU is fully aware of the “OpenSSL Heartbleed” Internet bug. This bug is an internet security vulnerability that can compromise sensitive information when sent over specific versions of SSL (Secure Sockets Layer) protocol.

After careful research and evaluation, we are pleased to confirm that FMFCU's web site, e-Banking, Mobile Banking, and other critical vendors were not put at risk by the use of compromised OpenSSL versions.

We will continue to monitor the situation to make sure your personal data is protected. Although you do not necessarily have to change your passwords with any of our systems, if you feel the need to do so, you can log into the respective system and make the changes. FMFCU takes security very seriously and is committed to maintaining member security at the highest level.

TIPS

  • Change your password on affected web sites after you know that patches or fixes have been made
  • Clear your cache and cookies from your browsers
  • Read some of the articles below for more information

MORE INFORMATION

FMFCU SSL CERTIFICATE INFORMATION

On a side note, we want to make sure you know that our web site has a fully validated Norton/Symantec Secure Site Pro with EV SSL Certificate which is used on a few secure forms (e-Banking is separate and has its own security). You'll notice on the left hand side of this page is a "Norton Secured" logo. This logo verifies that fmfcu.org is secure when https is needed on select pages. If you click on the logo, you will receive the official FMFCU SSL certificate information from Norton. In addition, some browsers will show you a green background in the url bar when connected securely to our site. Currently, we are working to correct an intermediate SSL certificate problem, but want you to know that is unrelated to Heartbleed. We're hoping to fix it shortly. This issue does not affect navigation/forms on our web site, e-Banking, or Mobile Banking.

REPORT ANY SECURITY ISSUES HERE (phishing, text messages, suspicious
phone calls, etc.) or e-mail us at abuse@fmfcu.org. We appreciate you letting us know.


Vulnerabilities

Trojan targets Linux desktop users, steals web banking info - 8/9/13
A rare instance of a Linux desktop trojan, Hand of Thief, has surfaced in the wild. Read the article >>
Android malware that gives hackers remote control is on rise - 7/17/13
Tool lets hackers “bind” remote access tool to legitimate apps. Read the article >>
Smartphone hacking comes of age, hitting US victims - 3/21/13
Criminals have been probing the systems that protect U.S. smartphone users for years, searching for the right combination of programming tricks and social engineering that would allow them to sneak onto users' phones. Recently, one hacker group hit the jackpot. Read the article >>
E-mailed malware disguised as group coupon offers on the rise - 11/14/12
Spammers take advantage of the rising popularity of e-mailed advertisements by mimicking them and attaching viruses. Read the article >>
Windows malware slips into Apple's iOS App Store - 7/24/12
It's a low-threat malware package that won't hurt iOS or MacOS but may pop Windows users who manage the app in their iTunes account. Read the article >>
Botnets 101: Everything you need to know - 3/8/12
Botnets are networks of personal computers infected by malware and remote controlled by criminals. Read the article >>
Web Targeting

Avoid tech support phone scams - 10/31/13
Cybercriminals don't just send fraudulent email messages and set up fake websites. They might also call you on the telephone and claim to be from Microsoft. Read what you need to know and how to protect yourself. Read what you need to know and how to protect yourself.
New Mac malware disguised with right-to-left encoding trick - 7/15/13
F-Secure is reporting that some new malware attempts in OS X are using a spoofing technique to disguise malicious installations as standard files. Read the article.
Phishing scam targets taxpayers who use tax software - 3/2/12
The growing popularity of tax preparation software has led to a rise in e-mail scams targeted at do-it-yourself taxpayers. Read the article.
How I nearly got scammed on Facebook - 4/7/11
A cautionary tale that may save you a few hundred--or a few thousand--dollars next time you get a message pleading for help. Read the article.
Phishing scam masquerades as Adobe upgrade - 3/31/11
Phishers use all kinds of come-ons to lure their victims. But one persistent piece of spam tries to trick people by offering an upgrade to Adobe Acrobat. Read the article.
Massive iTunes phishing attack - 10/5/10
Apple’s popular iTunes platform has become a major target for hackers looking to steal credit card data from the service’s millions of users. Victims receive a cleverly-crafted e-mail informing them they have made an expensive purchase on iTunes. Read the article.

Phishing Library >>
General Fraud Info

IRS Warns of Tax Refund Scam - 01/20/2014
It's that time of year again for tax refund scams communicated via email, phone, or in person. Here is a sample pdf of fraudulent email from a fake IRS account asking for a credit card to get your refund. Please delete these emails!
DEA Warns Public of Extortion Scam by DEA Special Agent Impersonators - 01/13/2014
The Drug Enforcement Administration is warning the public about criminals posing as DEA special agents or other law enforcement personnel as part of an international extortion scheme. Read the alert.
TIS THE SEASON…TO WATCH FOR FRAUD - 12/17/2013
Regardless if the offer is through the mail, phone, or Internet, they all have one objective ─ to separate you from your money! Get some tips.
New Treasury Public Service Announcement Warns Americans About Phone Scams - 01/15/2013
Phone scams are on the rise. Check out the U.S. Department of the Treasury's article on this subject. Read the article.
Foreclosure Rescue Scams - 04/21/09
How to Avoid Becoming a Victim. Foreclosure rescue scams target homeowners facing foreclosure, particularly if they are equity-richbut cash-poor. Rescue scams cost consumersthousands of dollars and, often, their most valuableasset — their homes. Read the article from the OTS.
You Have the Power to Stop Identity Theft
Consumer guidance on how to stop electronic identity theft. Read more >>
5 Tips for Protecting Your Checking Account
A nice brief article from the Federal Reserve Board. Read the article >>
Tips to Prevent Identity Theft
New statistics indicate less identity fraud. Advice on how to prevent unauthorized access to personal information is also discussed. More>>

General Fraud Info Archive>>

Copyright © 2014 FMFCU. All Rights Reserved. Federally insured by NCUA.