Skip to content
Impact Lab

A Laboratory of the Future Human Experience

  • Home
  • Futurati Podcast
  • Futurist Speaker
  • Book Thomas Frey
  • DaVinci Institute
  • About

Elaborate new computer virus raids your bank account – automatically covers its tracks

Impact Lab > Analysis > Elaborate new computer virus raids your bank account – automatically covers its tracks
Analysis, Big Problems, Internet, Money Talk, Science & Technology News

Malware-financial

A new version of the widely prevalent SpyEye Trojan horse swaps out banking Web pages, preventing account holders from noticing that their money is gone.

Checking your bank accounts diligently is the best way to protect yourself from an online financial scam.  At least, until now.

Israeli-based Security firm Trusteer has found an elaborate new computer virus that not only helps fraudsters steal money from bank accounts — it also covers its tracks.

Think of a crime plot involving a spy who plans to break into a high-security building and begins by swapping out security camera video so guards don’t notice anything is amiss. Known as a surveillance camera hack, the technique has been used in dozens of movies.

A new version of the widely prevalent SpyEye Trojan horse works much the same way, only it swaps out banking Web pages rather than video, preventing account holders from noticing that their money is gone.

The Trojan horse employs a powerful two-step process to commit the electronic crime. First, the virus lies in wait until a customer with an infected computer visits an online banking site, steals their login credentials and tricks the victim into divulging additional personal information such as debit card information. Then, after the stolen card number is used for a fraudulent purchase, the virus intercepts any further visits to the victim’s banking site and scrubs transaction records clean of any fraud. That prevents — or at least delays — consumers from discovering fraud and reporting it to the bank, buying the fraudster critical extra time to complete the crime.

Trusteer calls it a “post transaction” attack, because much of the virus’ effectiveness is attributable to its ability to control what victims see after fraudulent transactions occur. Amit Klein, chief technology officer for Trusteer, said he believes criminals have used the technique for a few months, and it has infected real consumers.

“I predict that the use of post transaction attack technology will significantly increase as it enables criminals to maximize the amount of fraud they can commit using their initial investment in malware toolkits and infection mechanisms,” Klein said.

The new SpyEye came to Trusteer’s attention when a large retail bank in the United States spotted it and shared with the firm, he said.

‘A very scary tactic’
The virus’ evidence-covering techniques are elaborate. First, it keeps track of all fraud committed by the criminal, and makes sure to remove those line items from online transaction lists. It also edits balance amounts to prevent consumers from getting suspicious.

“This is a very scary tactic,” said Avivah Litan, a financial fraud analyst at consulting firm Gartner. “Everybody thinks all they have to do is check their transactions and their balances. That’s not true anymore.”

The new virus technique ups the ante in the cat-and-mouse game between security companies and the computer criminals who try to steal consumers’ money. Consumer reports of fraud are still a very important part of fraud-fighting techniques, Litan said.

“Most banks ‘let the first transaction through,’ because if they stopped everything that was potentially fraud, consumers would get annoyed,” she said. In some cases, fraud-checking tools kick in only after initial reports, so this version of SpyEye could buy criminals important time as they try to turn stolen data into cash.

“Usually they only need one day more to get the money, to push the fraud through,” she said. “They always want to keep the security guys running after them.”

Such cover-your-tracks techniques have been used before by virus writers, Klein said. In a simpler version, criminals who raided online bank accounts and wired money out of them would try to hide the transaction from victims using the same Web page interception trick. But this new flavor has more potential for success, because it involves stolen debit card numbers used at third-party merchants, creating complex transactions involving multiple banks and multiple security systems.

Victim account holders who check their balance at an ATM — or even at a second uninfected computer — would be able to spot the fraudulent transactions. The virus doesn’t impact bank systems, merely the characters that are displayed within the infected system’s Web browser. That means paper statements would reveal the fraud, too.

Of course, consumers who rely on paper statements could be a full 30 days behind when it comes to spotting fraudulent transactions.

While Klein is worried about the “post transaction” attack, he said consumers who have vulnerable Web browsers are bound to be victims of one fraudster or another.

“My take is that if your computer is infected with financial malware, it’s game over anyway,” he said. “My takeaway is you need to prevent getting infected with financial malware in the first place.”

Via The Redtape Chronicles

__________________________________________________________________

udemy-logo-academyofyou-300x228

design user exp 7 steps

Design Your User
Experience in 7
Simple Steps

responsive web 23423423

Creating Responsive
Web Design

0
Tag: bank account, Criminals, Fraud, malware, money, SpyEye, trojan horse, virus, web browser

Leave a Reply

You must be logged in to post a comment.

Post navigation

Previous post

Doctors in America..

Next post

Dogs have skills..

Thomas Frey Futurist Futurati Podcasts
Book Thomas Frey Futurist
Categories
Recent Posts
  • VERIJET THE AI-POWERED AIR TAXI SERVICE SETS STANDARDS FOR ENVIRONMENTALLY RESPONSIBLE TRAVEL
  • Airrow is automating battery and payload swapping for drones
  • This hospital of the future gives a glimpse of healthcare transformed
  • First electric flying ferry will make Stockholm’s waterborne public transport faster than cars and subway
  • CRUISE’S DRIVERLESS AUTONOMOUS CARS START GIVING RIDES TO PAYING PASSENGER
  • Could an electronic tattoo revolutionise blood pressure monitoring?
  • IKEA ROLLS OUT AN AI-POWERED INTERACTIVE DESIGN EXPERIENCE FOR SHOPPERS
  • Tiny robot ‘fireflies’ could light the way for first responders
  • MOONRISE: LZH and TU Berlin bring 3D printing to the Moon with laser and AI
  • Proteus is Amazon’s first fully autonomous warehouse robot
  • Robot fish could solve the ocean’s microplastic pollution problem
  • Jetson ONE flying car makes its first eVTOL commute to work
  • EP. 91 with Patri Friedman
  • Lab-produced wood doesn’t grow on trees
  • Meta’s latest VR headset prototypes could help it pass the ‘Visual Turing test’
RSS Recent Posts on FuturistSpeaker.com
  • Self-Cannibalism and the Extreme Possibilities of Cell Cultured Agriculture June 30, 2022
  • Is a Cashless Society a Good Thing or a Bad Thing? June 23, 2022
  • The Emerging Crypto Micropayments Industry June 16, 2022
  • The Ukraine War is Paving the way for Robotic Warfare in the Future June 9, 2022
  • The Day that Passwords Died (It’s coming soon, really!) June 2, 2022
  • Deurbanization Part 2 – Ten New Predictions May 26, 2022
  • The Future of Crypto Ecosystems and their Mainnets May 18, 2022
  • Drone Delivery: A Massive Huge Industry Coming Soon to a Doorstep Near You May 12, 2022
  • Creating a Code of Ethics for Artificial Intelligence May 5, 2022
  • How Many of Today’s Cryptocurrencies Will Still Exist in 2040? April 28, 2022
Archives

Copyright 2020 Impact Lab LLC | Impact Lab is owned and operated by Impact Lab LLC.