Forest Global Training Partners

Cyber Risks · Krebs on Security

eBanking Victim? Take a Number.

Summary: Krebs on Security reports that over nine months it has documented dozens of small businesses whose online bank accounts were drained after attackers planted malware to steal banking credentials, with new victims surfacing weekly and losses of tens to hundreds of thousands of dollars from single infections. Two cases are detailed: Eskola LLC, a Tennessee roofing firm, lost $130,000 in five unauthorized wire transfers in late January and recovered all but more than $30,000, while Orange Family Physicians in Virginia lost $46,000 sent in sub-$8,000 chunks to a half-dozen money mules after its controller's PC was infected with the ZeuS Trojan, with the bank initially reversing only $6,000 before refunding the full amount after a reporter inquired.

What's compelling: Unlike consumers, businesses have no legal protection requiring banks to reimburse fraudulent transfers, so a single malware infection can leave a company holding losses in the tens or hundreds of thousands of dollars - and one bank told Eskola this crime had risen 500 to 600 percent over a year earlier.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related