Due to unsecure elements of older versions of selected web browsers, we will be discontinuing support for DBS iBanking and selected WebPages on those browsers. Examples are IE6 and below.
We recommend that you download and install the latest version of popular web browsers to ensure optimal customer experience. If your browser is up to date, and you are unable to access our website or DBS iBanking, please contact us at 400 820 8988.
Date: 16 October 2014
Threat Type: Security Vulnerability
Alert Level: Amber
Description: A vulnerability known as “POODLE” has been discovered on the SSL3 (Secure Sockets Layer v3) used by old versions of web browsers such as Internet Explorer 6 on Microsoft XP. SSL is used to establish an encrypted link between a website and a web browser (such as Internet Explorer) to keep the customer’s credentials and transactions secure. With the “POODLE” vulnerability present on SSL3, an attacker may be able to take control of the customer’s SSL channel which will then allow him to steal secret information such as account details.
How can you protect yourself from this?
At DBS, we are committed to developing web applications that provide optimal customer experience with modern and latest browsers. DBS/POSB iBanking and IDEAL websites also have layered security controls such as 2FA, OTP, and mChallenge that keep online banking transactions secure. For added security, we will also discontinue support for the now insecure SSL3 encryption protocol from 7 November 2014. This means that DBS iBanking including selected features on the DBS website will no longer be accessible by older version browsers such as Internet Explorer 6 on Windows XP.