Forest Global Training Partners

Cyber Risks · Krebs on Security

Brazilian ‘Boleto’ Bandits Bilk Billions

Summary: RSA researchers reported that a fraud ring called "Bolware" targeted more than 30 Brazilian banks and may be responsible for up to $3.75 billion in losses, based on a botnet control panel tracking nearly a half-million fraudulent transactions. The malware waited until victims filled out boleto recipient details on their bank's site, then substituted an attacker-controlled account, disabled the banks' browser security plug-ins, infected more than 192,000 PCs, and stole at least 83,000 sets of credentials, with the gang using just over 8,000 accounts to receive stolen funds.

What's compelling: Boleto payments cannot be charged back and can only be reverted by bank transfer, so every diverted payment lands as a direct loss - and the gang's 8,000 receiving accounts show how much infrastructure a single operation can stand up.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related