Cyber crime is a highly organized and technically sophisticated global business that is constantly evolving to take advantage of the weaknesses in the interactions of technology, business process and human behavior.  While Corporate Information Services spends hundreds of thousands of dollars annually to protect Old Republic National Title Insurance Company networks and business computers from these threats, the most effective defense against criminal exploits is an informed and alert user community.

The July 30 email from the Corporate Legal department raised attention to a prevalent threat aimed at financial services organizations of all sizes, engaged in on-line banking transactions and money transfer activities, the Zeus botnet.

A botnet is a collection of software agents designed to be unknowingly installed on  targeted host systems like web servers or workstations.  Once installed, an operator controls the implanted software remotely turning the host system into a "robot" or bot for the operator.  This software, upon command, will provide the operator with preprogrammed information designed to be harvested from the host computer system.  The Zeus botnet is specifically designed to provide information needed to initiate and complete on line banking transactions to the bot operator, allowing real time access to secured financial assets.

There is no single action that will prevent a bot attack.  The list below is a combination of activities that can reduce the likelihood of you becoming the unknowing participant in an attack.

Preventive Practices:

• Before beginning any financial transaction (wire transfer or ACH) check that the anti-virus software on your PC is active.

• Do not open suspicious emails or attachments or follow links that direct you to websites with which you are not familiar.
• Do not keep your internet browser open for extended periods when not in use.
• Change your password regularly if you are performing fund transfer activities.
• If you detect unusual application behavior during a wire transfer session, for example the session hangs or the screen goes blank, terminate the session immediately.  This can be done by powering off the computer or disconnecting the network cable from the back of the PC.  Do not leave a session unattended or in an incomplete status.
• Use two separate workstations to initiate and release outgoing fund transfer authorizations.   
• Minimize the amount of web browsing done from computers that are used for electronic wire transactions.  The less visibility to internet websites the less likelihood of acquiring malware.