Cyber Risks · Krebs on Security

Deconstructing the $9.84 Credit Card Hustle

Summary: Readers reported unauthorized $9.84 charges on credit and debit cards, traced to a network of affiliate and call-center sites registered through the email walter.kosevo@ymail.com, which was used to register more than 230 domains. Incorporation records link the operation to Cyprus-based companies Lasorea Ltd. and Lukria Ltd., and acquiring bank Credorax confirmed it had processed cards for the network until it terminated the relationship over consumer complaints.

What's compelling: The scheme worked by keeping each charge small enough to escape notice, and it had been running since at least the first half of 2013 across dozens of domains before any processor acted. A security leader should note that the fraud was caught by cardholders reading their own statements, not by the bank.

Read the original at Krebs on Security ↗

Topics
Fraud & Scams
Related