Cyber Risks · Krebs on Security

‘Project Blitzkrieg’ Promises More Aggressive Cyberheists Against U.S. Banks

Summary: RSA detailed a criminal project called "Project Blitzkrieg" that seeks to recruit 100 botmasters to launch online heists against 30 U.S. banks, reportedly announced on Underweb forums by a Russian hacker using the nickname "vorVzakone." The campaign, purportedly to run through spring 2013, is powered by a version of the Gozi Trojan called "Gozi Prinimalka" and is tied to a gang RSA believes has already stolen at least $5 million from banks.

Key Takeaway: The plan targets the U.S. banking industry's weaker anti-fraud controls relative to European institutions, which generally require two-factor authentication for all wire transfers, and it includes flooding victims' phone lines to block confirmation calls while accounts are drained. Business and commercial accounts do not get the same fraud protections consumers receive under Regulation E, so the losses land on the account holder.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related