Warning about security holes of stock exchanges, investors should change passwords-Information Technology

It is possible that the crooks have obtained some specific information of investors in the stock market, such as usernames and login passwords.

The State Securities Commission (SSC) has released information that this agency has cooperated with the Department of Cybersecurity and high-tech crime prevention and control – Hanoi City Police and detected a number of objects trying to access the information technology system of securities companies (SSC) through security holes.

The stock market has attracted a lot of attention in recent years. (Illustration)

According to the Securities and Exchange Commission, these subjects have now obtained some specific information of customers, such as login usernames and passwords, thereby being able to hijack investors’ securities trading accounts to trade securities. performing securities transactions, transferring money, withdrawing money and appropriating clients’ assets.

The Securities and Exchange Commission has sent an official dispatch to the securities companies and requested the securities companies to immediately scan the security holes of the information technology system, especially the online securities trading system and the systems connected to the network. Internet to promptly fix security holes (if any). Also, update security patches of server operating systems, databases, and other IT equipment.

The regulatory agency also requires securities companies to publicly announce and at the same time take measures to contact each investor to request an immediate change of user password; warning about potential risks and dangers when revealing information about user usernames and passwords; regularly recommend investors to take measures to protect their account information such as: Change passwords periodically, avoid sharing securities trading passwords with other types of personal accounts.

The SSC also requires securities companies to re-check the processes when investors perform online transaction authentication to overcome risks for investors when performing transactions; adjust the system so that the customer’s money transfer, money advance, account change transactions must be verified by OTP immediately.