How to access BOB Internet Banking with SSL/TLS error

In case you are receiving the error: ssl_error_illegal_parameter_alert  when you are trying to access Bank of Bhutan(BOB) Internet Banking then just follow the following step

In case of browser Firefox:
1. Type in address bar about:config
2. Search for security.tls.version.min and security.tls.version.fallback-limit and set the value to 0

Now open the site it will be working fine.

security.tls.version.min  value meaning:
1. 0 means SSL 3.0 is minimum/maximum supported encryption protocol.
2. 1 means TSL1.0 is minimum/maximum supported encryption protocol.
3. 2 means TSL1.1 is minimum/maximum supported encryption protocol.
4. 3 means TSL1.2 is minimum/maximum supported encryption protocol.

The above error is thrown due to SSL and TLS version which is a proactive way to combat the "POODLE" vulnerability.

Heartbleed virus

Heartbleed virus or bug is a vulnerability in the popular OpenSSL software mostly used in the server platform. The bug allows stealing of information that is protected normally though SSL/TSL encrypted connection by allowing to read the memory of the system.

You can check online if your server is vulnerable to Heartbleed by going to http://filippo.io/Heartbleed.

Some version of android phones are also vulnerable to Heartbleed virus, like android version 4.1.x version. The user are advised to install the Heartbleed Detector app from Lookout Mobile Security to check if your phone is vulnerable. The app with just detect and will not resolve the issue.

You can also check out Heartbleed virus site.

Bank of Bhutan (BOB) Phishing site

A new phishing site had been launched to attack Internet Banking users of Bank of Bhutan. So many Bhutanese have received an email which looks like this:

Please, do don't click on the link. Just ignore the mail or report as SPAM/Phishing if you have such option in your mail system. Always check the sender email address and Send to address when ever you receive any mail, coz you never know some mails could be like this one too, and one more thing, never ever click on the link that is in your mail. It is wise to type it down or copy and paste.