Comments on: Maybank2U Victim Lost RM4,935 http://www.websitesolution.com/2008/09/26/maybank2u-victim-lost-rm4935/ Confessions of a Web Developer Sun, 06 Nov 2011 06:33:35 +0000 hourly 1 http://wordpress.org/?v=3.0 By: Stone Soup of an Online Business » Blog Archive » PBeBank: Choice is Bad http://www.websitesolution.com/2008/09/26/maybank2u-victim-lost-rm4935/comment-page-1/#comment-720 Stone Soup of an Online Business » Blog Archive » PBeBank: Choice is Bad Mon, 01 Dec 2008 04:29:04 +0000 http://www.websitesolution.com/?p=381#comment-720 [...] like Public Bank e-Banking system has learnt the lesson from Maybank2U and start to include the following alert of the website. Too bad, they might want to stick to just [...] [...] like Public Bank e-Banking system has learnt the lesson from Maybank2U and start to include the following alert of the website. Too bad, they might want to stick to just [...]

]]> By: socialtalkr|kengyew http://www.websitesolution.com/2008/09/26/maybank2u-victim-lost-rm4935/comment-page-1/#comment-656 socialtalkr|kengyew Sat, 25 Oct 2008 06:48:14 +0000 http://www.websitesolution.com/?p=381#comment-656 We should take note that if the "victim" is reading the message, hes already in the right website. The phisher will not be so cooperative to put the same message for the "victim" to check, maybe he would insert his own URL. There might NOT even be a way to save people who randomly give away passwords and click on email links. I'm just curious how the phisher managed to get both his login and his TAC?! that sounds coordinated and not random phishing. I would question the INTERNAL security measures that Maybank is currently implementing. Anyway man, the past few days u really taught me alot leh! web pages should not be designed at random, nor should they be designed purely to look good. We must understand the purpose, goals, problems and the solutions WELL before we even get started. I might disagree a little on the cruise ship website issue. I dont think we can entirely blame a team who have never been exposed to what the web can really offer to come up with a better solution than just an extension of the physical business. I remmeber you said during our meeting that day, if they really took web presence seriously, they should form a NEW team, dedicated to that purpose, with measureable KPIs to work towards. that would produce the kind of web presence worth spending money on and in the case of the cruise ship business, even produce sales transactions. We should take note that if the “victim” is reading the message, hes already in the right website. The phisher will not be so cooperative to put the same message for the “victim” to check, maybe he would insert his own URL. There might NOT even be a way to save people who randomly give away passwords and click on email links. I’m just curious how the phisher managed to get both his login and his TAC?! that sounds coordinated and not random phishing. I would question the INTERNAL security measures that Maybank is currently implementing.

Anyway man, the past few days u really taught me alot leh! web pages should not be designed at random, nor should they be designed purely to look good. We must understand the purpose, goals, problems and the solutions WELL before we even get started.

I might disagree a little on the cruise ship website issue. I dont think we can entirely blame a team who have never been exposed to what the web can really offer to come up with a better solution than just an extension of the physical business. I remmeber you said during our meeting that day, if they really took web presence seriously, they should form a NEW team, dedicated to that purpose, with measureable KPIs to work towards. that would produce the kind of web presence worth spending money on and in the case of the cruise ship business, even produce sales transactions.

]]>