FARMINGTON – A Web page shutdown inconvenienced online customers of Franklin Savings Bank for the second time in a week, but early detection helped stem the spread of a malicious code planted on their marketing site.
Customers were not able to reach the bank’s Web page Friday when the bank shut it down after their security systems detected the code. The problem resurfaced Wednesday, causing another shutdown until the bank could change its Web host.
“The malicious code that hit our page last week appears to be widespread on the servers of the company that hosts our Web page,” Tim Thompson, a senior vice president, said Wednesday. “We again took down our Web page to block the threat from reaching our customers. We are in the process of changing Web hosting companies and will have our new page up and running as soon as possible.”
Thompson would not name the company, but noted that it hosts hundreds of thousands of Web pages globally.
The affected Web page accessed with the addresses www.FranklineBranch.com, www.fsbme.com and www.WesternMountainFinancial.com, is used as an online brochure providing information about the bank and a link for its online banking program, FranklineBranch, which is located on a different server.
“It’s important to understand that the marketing Web page is distinct from the banking software and not connected to customer information,” he said. The bank’s financial system is monitored 24 hours a day by an outside security company.
The source of the code is not known, but it appears to be a random attack not aimed specifically at financial institutions, said Peter Fortunato, the bank’s Information Systems administrator.
The Web page was taken down quickly to protect customers because of the unknown, said Anna Lyon, marketing director. The code directs users’ computers to a site in China where more instructions could be given to the infected computer.
“We don’t know what the code’s intentions are,” she said.
Lyon was unable to confirm whether the Web site was back online Thursday morning. She expected it would not be down for a long time.
The best defense against computer viruses or the malicious code is regular updates of anti-virus software, she added. The bank was alerted to the problem through its security software.
“If you’re going to play football, you put on the proper gear. It’s no different for Internet users, even if they only check their e-mail,” she said. Many antivirus programs can block this attack, but the key is people need to keep their software updated, she said.
Customers who perform online transactions were unable to do their banking during the Web site shutdowns. They are welcome to contact customer representatives with any questions about account transfers or check clearances. Accounts may also be accessed through the bank’s telephone system, Telebanker, she said.
Anyone with questions may contact the bank at 778-3339 or 800-287-0752.
Comments are no longer available on this story