Forest Global Training Partners

Cyber Risks · Krebs on Security

Crooks Crank Up Volume of E-Banking Attacks

Summary: An auto body shop in Hudson, Ohio, Clarke Collision Center, had its Fifth Third Bank accounts emptied after an employee entered her username, password and security-token code on a page that told her the bank site was down for maintenance and gave a 1-800 number that was not in service. Consultant Craig Kintz said malicious software, usually the ZeuS Trojan, rewrites the bank's HTML in the victim's browser, and a bank manager told his client four other Fifth Third business customers were attacked the same day.

What you should know: The bank froze all accounts by 11:30 a.m. after the 9 a.m. report, but by then they were empty, and the wire transfers that made up the bulk of the loss could not be reversed - the deterrent the bank marketed, a token-generated one-time passcode, gave the employee no signal about what she was actually authorizing.

Read the original at Krebs on Security ↗

Topics
Identity & Access Management
Related