The Sign Syndicate: The Sign Syndicate - Unreal Portal

Wanted: Defense Against Online Bank Fraud


By RIVA RICHMOND
Wall Street Journal | Small Business



Cybercriminals have found a rich, new hunting ground: small businesses' bank accounts.

Just ask Sign Designs Inc., an electric-sign maker in Modesto, Calif. The first sign of trouble was a morning phone call from Bank of Stockton, Sign Design's community bank. It had just fielded a call from Chase Bank, whose anti-fraud team was questioning the legitimacy of a $9,670 electronic payment to a Chase customer in Michigan. Sign Designs confirmed it hadn't set up the payment, and the banks halted the transaction.

Checking its account online, Sign Designs quickly discovered the problem was much bigger: Almost $100,000 had been sent to 17 mystery people, all added as payees the previous day. Although Bank of Stockton immediately notified all the banks that had received funds, some $48,000 had already been picked up by "money mules," people recruited to shuttle money for online-crime groups, typically in Eastern Europe.

Bank of Stockton says it isn't responsible for the losses because its systems were never breached. Hackers had planted a malicious program on the computer of Sign Designs' controller and used it to steal his online-banking credentials. The California bank also says Sign Designs failed to take advantage of security measures that might have averted losses, such as requiring two staff members to sign off on every payment.

Sign Designs President David Johnston argues that Bank of Stockton should cover the losses because it didn't flag the highly unusual account activity nor did it bar two computers—the controller's and hacker's—from accessing the account with the same credentials at the same time. "I don't think they should offer a service that is not safe," Mr. Johnston says. "Do you expect I'm going to solve this? I'm going to take on these Russian thieves? Clearly I'm not going to [be able to] do it."

Sign Designs is among a growing number of small businesses whose bank accounts have been drained in increasingly sophisticated hacker attacks over the past two years. Losses have climbed into the hundreds of millions of dollars in the past year or so as more organized-crime groups, emboldened by the success of fellow criminals, move online, says Shawn Henry, assistant director of the Cyber Division at the Federal Bureau of Investigation, which issued a public warning about the problem in November.

Small businesses are proving a rich target for hackers because they—and the smaller regional banks they often use—tend to have fewer technical and financial resources to stop attacks. And unlike consumers, they lack legal protections from identity fraud, so they typically are forced to absorb the losses.

"Small businesses are really in a bind," says Avivah Litan, an analyst at Gartner Inc. "They need to protect themselves."

Experts offer the following suggestions for small businesses seeking to ward off an attack:
Defend Computers

Hackers often take aim at small firms' computers because they are easier to infiltrate than banks' systems. One common mode of attack is to send a "spear phishing" email containing an infected file or a link to a malicious Web site to employees with access to the firm's financial accounts. Once the employee opens the attachment or goes to the Web site, malware is installed on the computer that allows criminals to access banking logins and passwords. While up-to-date antivirus software offers substantial protection against malware, it isn't 100% effective.

Accessing your bank account through a computer that isn't used for anything else—no email or Web surfing—and isn't connected to the local network offers strong protection, says William Nelson, president of the Financial Services Information Sharing and Analysis Center, an industry group that collects and shares threat data.

Another option is to use an obscure computer operating system such as Ubuntu or Web browser such as Opera because attackers rarely create malware for them, security experts say.

If you use Microsoft Corp.'s Internet Explorer browser, make sure you have the latest version, IE 8, which includes security features to help prevent attacks. Consider using Explorer in "protected mode," which restricts files that try to install on a computer without the user's consent, and set your "Internet zone security" to "high," which disables some of Explorer's less-secure features, according to Microsoft.
Protect Accounts

Ask your bank to set up "dual controls" on your account so that each transaction requires the approval of two people—a good guard against fraud, security experts say. Establish a daily limit on how much money can be transferred out of your account, and require that all transfers be prescheduled by phone or confirmed via phone call or text message. If possible, impose restrictions on adding new payees, security experts say.

Check bank balances and scheduled payments at the end of every workday, rather than the beginning, and immediately contact your bank if anything is amiss. Banks use the Automated Clearing House system to transfer funds to payees' banks. These transfers usually aren't paid until the next morning, so timely action could halt the completion of a fraudulent transaction, Mr. Nelson says.
Shop for a Bank

Review your agreement with your bank and know what rights you may be waiving by not using certain security measures. While agreements between banks and commercial customers typically absolve banks of responsibility for fraud losses, the bank down the street may offer better protections, so shop around. Also, consider adding insurance coverage for fraud losses.

Many banks, concerned about damage to customer relationships, have stepped up their defenses against cyberattacks, rolled out new protections for customers and begun sharing more threat information with each other and law enforcement, Mr. Nelson says.

An emerging motivator may be a growing number of lawsuits by small companies claiming their banks didn't have "commercially reasonable" security.

A judge in a closely watched case involving a self-employed couple's personal and commercial accounts said in refusing to grant a summary judgment that a jury might find fault with the adequacy of the bank's defenses, which the plaintiffs argued weren't state of the art at the time of the theft. The case—Shames-Yeakel vs. Citizens Financial Bank—was settled in late December under confidential terms. The plaintiff's lawyer, John Soumilas of Francis & Mailman PC in Philadelphia, says he pursued the case as one of consumer-identify theft, where protections are ample.

Still, David D. Johnson, a digital-media lawyer at Jeffer, Mangels, Butler & Marmaro LLP in Los Angeles who wasn't involved in the case, says the judge's action suggests that "a bank can't simply rest on its laurels, on its security measures that worked last year," and avoid liability. The judge declined to comment, and Citizens Financial didn't return a call for comment.
Reach Out

Connect with law-enforcement agencies before an incident occurs, suggests Mr. Henry. He says small businesses should consider joining the FBI's InfraGard, a group of businesses, academic institutions and state and local law-enforcement agencies that seek to ward off cyberattacks and other threats by sharing information and intelligence.

He also urges companies to report all computer crimes immediately to the FBI. The agency has relationships with law-enforcement organizations around the world that are starting to bear fruit, he says, pointing to the recent arrest of 120 people tied to Romanian groups that allegedly stole money from U.S. companies and citizens.

"In the cases where we have put hands on somebody, it was the result of a victim company raising their hand and saying this happened," Mr. Henry says. "If they hit you today, they're hitting the guy down the street tomorrow."

Inside the International Sign Association

Tuesday, February 2, 2010, 6:12pm EST
Washington Business Journal

International Sign Association, a 2,600-member international trade group that supports, promotes and improves the sign industry, showed off its snazzy new headquarters in Alexandria.



Hickok Cole Architects designed its 15,000-square-foot office space, with concepts based on neon and the flow of light it creates. Graphic films on glass-front offices helped to provide direction through the space.

Designers accented the curves of the central reception desk with LED lighting, making it visible from both ends of the long, barbell-shaped space.



Its sliding door system by Frezza Wall -- which is cheaper than a traditional installation -- created enough space so that future offices and workstations can grow.

Philips LED products exceeded 10% of lighting sales

01 Feb 2010
Within its Lighting business sector, LED-based products exceeded 10% of sales for Philips during the last quarter of 2009.

LED-based products exceeded 10% of Philips' total sales within the Lighting business sector, the company said when announcing its results for the fourth quarter of 2009.

Gerard Kleisterlee, president and CEO of Royal Philips Electronics , said that the company is "more than ready for the transition to even more versatile and energy-efficient LEDs and other forms of solid-state lighting."

Sales in the Lighting business sector declined from EUR1.939 billion in Q4 2008 to EUR1.846 billion in Q4 in 2009, although Philips said that the figures effectively showed no change on a comparable basis (i.e. excluding the effects of currency movements and changes in portfolio). However, full-year sales for 2009 were EUR6.546 billion, down 13% on a comparable basis.

Kleisterlee said “The Lighting sector continued on its road to recovery with strongly improved earnings and rebounding sales even though the commercial construction market continued to be in decline; and for the first time, LED-based products exceeded 10% of total sector sales.”

"In the last quarter of 2009, sales in emerging markets, in Lumileds [Philips' LED-making subsidiary] and in automotive were much higher than in Q4 2008, while Lamps enjoyed excellent growth, driven by the demand for energy efficiency," said Kleisterlee.

Philips Lighting claims to be the global leader in lamps, but also "in the sectors that matter most going forward," namely energy-efficient lighting, professional luminaires, LED-based products and applications, and automotive.

Kleisterlee said that Philips is "increasingly offering complete lighting solutions as opposed to lighting products, and that is precisely where the market value will be in the future."

He also said that Philips "will endeavor to optimize our manufacturing and supply structures during the transition from the traditional incandescent lightbulb to more energy efficient lighting solutions."

Wells Fargo to Rebrand Wachovia Branches

by DIANA GOLOBAY


Thursday, January 28th, 2010, 9:34 am

Wells Fargo & Co. (WFC: 28.45 +0.89%) will add more banking locations in Texas as it moves forward with plans to rebrand and rename its Wachovia branches in July.

The consolidation should not result in any job elimination.

Wachovia and Wells merged in December 2008 after rival suitor Citigroup (C: 3.24 +1.25%) pulled out of acquisition talks following four days of discussion on splitting Wachovia’s assets. The result of the Wells/Wachovia merger included$1.4trn in assets and 11,000 stores nationwide servicing 48m banking households and 276,000 employees.

Following the rebranding, Wells will add 161 banking stores in Texas, bringing its statewide count of banks to more than 700 and its count of ATMs to more than 1,000.

This conversion process will also result in 79 Wachovia and Wells Fargo locations combining in the state due to close proximity. Wells said in a statement most of these branches are located within about a mile of each other.

“[W]e’ve been working behind the scenes for months to combine these two great companies, teams and cultures,” said Chip Carlisle, Wells Fargo regional president for Texas. “With our combined resources, we’re in an even better position to satisfy all our customers’ financial needs.”