Feeds

Articles about Fraud

australian credit cards fraud contactless

Hacker claims PayPal loophole generates FREE MONEY

A PayPal loophole can be exploited to earn free cash according to a convicted former NASA hacker turned white hat. Fraudsters can double their money, says Razvan Cernaianu, by funnelling cash into a mule account before filing for a transaction refund. To pull off the rort* a fraudster needs three PayPal accounts. One is a …
Darren Pauli, 13 Jun 2014
PayPal inStore app in action

Credit card of PayPal PRESIDENT cloned by UK crooks

PayPal president's credit card got hacked on a UK visit, the victim revealed on Twitter. David Marcus said that an unidentified criminal used a skimming device and his credit card was cloned before "tons" of fraudulent transaction were made. The senior executive of the eBay-owned payment processing firm made sure to score a …
John Leyden, 12 Feb 2014
australian credit cards fraud contactless

Teensy card skimmers found in gullets of ATMs

A series of tiny and sometimes transparent card-skimming devices have been detected in ATMs across Europe, researchers say. Boffins with the European ATM Security Team (EAST) have plucked out and displayed some clever thumb-sized skimmers that hide from victims' view by fitting in cash terminals' gullets. The devices paraded in …
Darren Pauli, 09 Jul 2014
Nuclear bomb image

Intruder alert: Cyber thugs are using steganography to slip in malware badness

Common or garden cybercrooks have taken to using steganography – the art of hiding secret information within another image or message file – to run a click-fraud scam. Steganography has long been the stuff of spy trade-craft and cypherpunk novels, but now cybercrooks have made the practice downmarket by applying it to the Lurk …
John Leyden, 08 Aug 2014

Lads from Lagos using 'Predator Pain' on hapless 419 victims

Advanced-fee fraudsters are adopting the tactics of state-sponsored hackers in attacks targeting small- to medium-sized businesses, rather than large corporates, according to research from Trend Micro. 419 gangs are using the Predator Pain and Limitless keyloggers to steal network credentials through spear-phishing attacks, …
John Leyden, 13 Nov 2014
australian credit cards fraud contactless

PCI Council wants YOU to give it things to DO

Crusaders at the Payment Card Industry Security Standards Council have called for submissions into projects for 2015. The council is responsible for PCI Data Security Standards (PCI DSS), a - to date - largely failed initiative to impose better credit card processing security by retailers. A Special Interest Group is accepting …
Darren Pauli, 27 Aug 2014
Brazil flag

Brazilian baddies bank Boleto billions

Brazilian bad guys appear to have made an astonishing $US3.75 billion by scraping a tonne of tiny transactions from a popular payment system used by locals, RSA researcher Eli Marcus says. The carders operating a single fraud ring may have netted enough over the last two years to foot 80 percent of Brazil's $4.7 billion World …
Darren Pauli, 03 Jul 2014
The Register breaking news

Crooks beat anti-fraud cops with old-school bank scams

Payment card and banking fraud losses fell this year against a rise in cash pilfered through old-school cheque and telephone banking fraud, according to figures released today for the UK. Total fraudulent losses dropped to £169.8m between January and June 2011, down 9 per cent from £187m in the same period last year. Losses fell …
John Leyden, 05 Oct 2011
NSW Police car

Sydney coppers clobber cabbie carder crims

Sydney police have swooped on a fraud ring that implanted skimmers into taxis to clone customers' credit cards. Police on July 1 arrested four men involved in the ring including a 29 year-old taxi driver at Chullora, nabbed a fifth chap later that day, and raided a Sydney CBD unit where 800 credit cards, a laptop and cloning …
Darren Pauli, 11 Jul 2014
The Register breaking news

Stick punters' mugs on e-banking pages, that'll end fraud - Schneier

Cryptography guru Bruce Schneier called for more creative thinking and a broader perspective as a means to tackle security problems. For example, the music industry, faced with an explosion in online file-sharing, hired security pros to develop anti-piracy measures, such as digital rights management technology. But these …
John Leyden, 11 Oct 2012
The Register breaking news

Penang fraud gang 'ringleader' snared by Taiwan police

The suspected ringleader of an internet and telephone fraud gang based in Penang, Malaysia, has been nabbed by police after being lured to Taiwan by his former gang-mates, it has emerged. A Taiwanese man known as Huang was reportedly arrested at Taoyuan International Airport near Taipei as he re-entered the country at the end of …
Phil Muncaster, 10 Feb 2012
The Blue Mosque in Istanbul

HSBC Turkey WON'T reissue cards despite 2.7 MILLION account details going AWOL

HSBC Turkey has confessed to a security breach exposing the details of 2.7m credit card accounts but the bank has made a decision not to reissue cards after deciding that the data exposed is not enough to make fraudulent transactions. The compromise – limited to the international bank's business in Turkey – exposed credit card …
John Leyden, 14 Nov 2014
grab_that_cash

Who wants to be A MILLIONAIRE? Not so fast, Visa tells wannabe pay-by-bonk thieves

Visa Europe has downplayed a new attack that could steal hundreds of thousands in foreign currency over the air from contactless credit cards. The electronic robbery was devised by researchers at Newcastle University in the UK, but the banking giant claims the techniques used aren't feasible in the real world. The researchers' …
Iain Thomson, 05 Nov 2014
Kronos

'Father of Zeus' banking trojan appears at very reasonable price

A banking trojan dubbed the father of the infamous Zeus malware is being flogged on cybercrime marketplaces for a pricey $7000, says fraud specialist Etay Maor. The Kronos malware was sold on a cybercrime forum, pitched particularly to Zeus trojan customers given its capabilities to re-use that trojan's form grabbing templates …
Darren Pauli, 15 Jul 2014
The Register breaking news

UK fraud losses soar to over £38bn

Fraud cost the UK economy more than £38bn over the last 12 months, according to the latest annual statistics from the UK's National Fraud Authority. The figures represent an increase of nearly £8bn (or more than 25 per cent) for the losses recorded by the same Annual Fraud Indicator last year. Fraud in the public sector (£21.2bn …
John Leyden, 28 Jan 2011
Tactical facepalm

Oz biz regulator discovers shared servers in EPIC FACEPALM

The Australian Securities and Investment Commission, which in 2013 accidentally blocked innocent Websites in an attempt to disrupt financial fraud, has told a government inquiry it didn't actually know what it was doing. In using what are called “Section 313 notices” under the Act to shut down fraud sites, the financial …

Ultimate hardware hack: Home Depot nailed by vice merchants

Do-it-yourself kingpin Home Depot has confirmed a report it was breached indicating the compromise occurred in April this year. The US retail chain was working with law enforcement over compromise of payment terminals across stores in the country. Chief executive of the hacked firm Frank Blake admitted the breach in a terse …
Darren Pauli, 09 Sep 2014
Android logo

'Most advanced mobile botnet EVER' is coming for your OFFICE Androids

A newly discovered variant of NotCompatible is establishing what has been called the most advanced mobile botnet yet created. Security researchers at Lookout warn that the latest version of the Android malware is capable of infiltrating secure enterprise networks via compromised devices. NotCompatible uses a peer-to-peer control …
John Leyden, 19 Nov 2014
Goodwill

Goodwill's goodwill rocked as Feds probe bank card hacking scam

American charity Goodwill is being investigated by US federal authorities as the possible ground zero for a major debit and credit card security breach. But the company says it thinks it's in the clear. "Goodwill Industries International was contacted last Friday afternoon by a payment card industry fraud investigative unit and …
Iain Thomson, 22 Jul 2014
Puss considers how to respond to PayPal marketing overtures

'Bank couriers' who stole money from OAP cancer sufferer jailed

Two men have been jailed following their conviction for running a series of courier fraud scams in south London, Surrey and Sussex. Shaun Moore, 22, of no fixed abode and Jevon Grant, 20, of Croydon were sentenced to 18 months imprisonment and two years in a young offenders' institution, respectively. Both pleaded guilty to …
John Leyden, 03 Apr 2014
Disney's Beagle Boys

Four caged in UK after cyber-heist swipes €7m in EU carbon credits

Four men were jailed in the UK this week following the theft of millions of pounds in carbon-emission credits. The gang was convicted for their part in an operation that stole half a million credits – valued at €7m (£5m) at the time – from the Czech Republic’s carbon-emission registry back in January 2011. European carbon- …
John Leyden, 26 Sep 2014
The Register breaking news

Amazon, eBay, banks snub anti-fraud DNS tech, sniff securo bods

Despite the best attempts of security vendors, neither online stores nor the financial industry seem particularly keen to adopt DNSSEC tech - an anti-fraud mechanism that makes it difficult for fraudsters to spoof legitimate websites. DNSSEC (DNS Security Extensions) uses public-key encryption and authentication to guard against …
John Leyden, 18 Feb 2013
channel

Fraud charges for 3 former Torex execs

The Serious Fraud Office (SFO) is charging three former executives of Torex Retail Plc with fraud offences. The company came to the attention of investigators four years ago after a trading update in 2007 which claimed all was well was quickly followed by a profit warning. The SFO raided several properties as a result, and the …
John Oates, 05 May 2011
graph up

US judge rejects Oracle's fraud claim against HP

A US judge has dismissed an Oracle fraud claim against HP in the companies' ongoing legal battle over the Itanium platform. Last year, Oracle discontinued its software support for Itanium chips, alleging that Intel had made it clear the microprocessors' time was nearly up and that it would now be focusing on its x86 chips. HP, …

Queensland cops collar League of Legends 'hacker'

A Queensland man has been arrested, accused of hacking League of Legends and selling player data online. According to Queensland Police the 21-year-old, identified by News Limited as Shane Duffy of Kingaroy, unlawfully accessed Riot's network, databases and files, and hijacked the company's Twitter account. The police say they …

Press release scam pelts poor PRs with volley of UNTRUE invoices

Fraudsters are targeting PR agencies that make use of newswires though a sneaky false invoicing scam. Pressat, which distributes press releases from tech PR agencies and others, put out a warning about fraudulent attempts to trick its clients into paying out on the back of false invoices that typically demand €580. The latest …
John Leyden, 28 Apr 2014

HP says it will sue former Autonomy CFO Sushovan Hussein

HP has confirmed that it plans to sue Sushovan Hussain, the former chief financial officer of data analytics software firm Autonomy, whom HP claims "was one of the chief architects of the massive fraud" that forced HP to write down $8.8bn of the $10.2bn it paid to acquire Autonomy in 2011. In documents [PDF] filed with the US …
Neil McAllister, 04 Aug 2014
australian credit cards fraud contactless

Americans to be guinea pigs in vast chip-and-PIN security experiment

Next year US banks will begin a wide-scale rollout of chip-and-PIN bank cards, just 11 years after the UK made it mandatory. In doing so, Americans will take part in a vast experiment to test chip-and-PIN against chip-and-sign when it comes to stamping out money thieves. Not every US bank is keen on the PIN system, so some …
Iain Thomson, 07 Aug 2014

Carders punch holes through Staples

US office giant Staples is investigating a possible credit and debit card breach of its Northeastern stores. Evidence for the hack, reported by cybercrime and prolific breach blower Brian Krebs, is apparently based on a dozen fraud monitor sources within different US banks. Staples has contacted police and said it was …
Darren Pauli, 21 Oct 2014

Queensland man arrested on charges including Bitcoin theft

Back in March, a man from the Queensland town of Kingaroy identified by News Limited as Shane Duffy was charged for breaching the systems of Riot Networks.Those attacks included copying files and briefly hijacking the company's Twitter account, and in April, a Maryborough magistrate confirmed bail conditions that forbade him …
Arthur Katsogiannis

New South Wales' top cybercrime cop talks to Vulture South

It seems odd that a veteran hard-nosed, clean-cut cop who cut teeth fighting triads and outlaw bikie gangs across Sydney would apply for a job running the state's cybercrime police division, and even more bizarre that he would get it. But sometime in his younger years before the then champion bodybuilder would oversee …
Darren Pauli, 14 May 2014
Telephone

One in 2900 phone calls is an IDENTITY THIEF

One in every 2900 phone calls to contact centres was made by fraudsters attempting to gain customer account details to steal funds or buy merchandise, according to Pindrop Security's Vijay Balasubramaniyan. Researchers canvassed 105 million phone calls and studied the way fraudsters pulled off identity theft by conning phone …
Darren Pauli, 06 Aug 2014
The Register breaking news

Auction fraud complaints prop up declining US cybercrime reports

US complaints about internet fraud dropped 10 per cent last year. The Internet Crime Complaint Center (IC3) fielded 303,809 reports of cybercrime in 2010, down from 336,655. The agency – maintained by staff from by the FBI and the National White Collar Crime Center – said the reduced figures were still the second highest in its …
John Leyden, 25 Feb 2011
Lego Monster Fighters Lord Vampyre

Go on, corporate drone, log in... We'd recognise your VEINS anywhere – Barclays

Barclays is ramping up its fight against online fraud with the roll-out of a biometric scanner that uses Hitachi’s Finger Vein Authentication Technology (VeinID). Unlike fingerprints, vein patterns are extremely difficult to spoof or replicate. Barclays Biometric Reader will allow customers secure access to their online banking …
John Leyden, 05 Sep 2014

Martha Lane Fox: YEUCH! The Internet is MADE by MEN?!?

Baroness Lane-Fox of Soho has talked of her discomfort that the internet is made by humans who have a penis. The former Martha Lane Fox, CBE, told the Radio Academy's Radio Festival in Salford that she felt uneasy "that something that is now fundamental, like the water, for everybody’s daily life has been entirely produced by …
Andrew Orlowski, 15 Oct 2014
The Register breaking news

MPs criticise banks on online fraud despite declining losses

A House of Commons Treasury Select Committee report has criticised banks for failing their customers in the fight against online fraud. Members of the influential committee criticised banks as being "unprepared" to deal with internet fraud as part of a wider study into retail banking, whose main conclusions called for greater …
John Leyden, 07 Apr 2011
The Register breaking news

Euro fraud cops crush garlic tax evaders

The European Anti-Fraud Office (OLAF) says its new whistleblowing website has helped it extinguish a cigarette-smuggling ring and sniff out falsely labelled garlic. Since OLAF launched the internet-based Fraud Notification System last year, the number of fraud tip-offs has increased: previously, whistleblowers could leave a …
Paypal vulnerability

PayPal post-checkout cash slurp a FEATURE not a BUG

An apparent flaw that lets users add any amount of money onto already processed PayPal transactions is a feature, not a bug, according to the payments giant. The function was designed to allow sellers to add additional costs for services like shipping on the top of transaction totals which customers had approved through the …
Darren Pauli, 23 Jul 2014

Aussie builds contactless card cloner app, shops at Woolies with fake card

Money hacker Peter Fillmore has created an Android app that can clone some of Australia's most popular contactless credit cards. In attacks that slipped beneath banks' and credit card providers' radars, the Aussie boffin probed the protocols behind Visa and Mastercard payment cards and proved the viability of an attack by …
Darren Pauli, 07 Oct 2014
The Register breaking news

China's internet wunderkind in the dock over alleged fraud

Chinese internet darling Qihoo 360 Technology has been accused by the research arm of hacktivist group Anonymous of deliberately overstating the volume of traffic to its site in order to attract advertisers, allegations which if true could see it kicked off the New York Stock Exchange. Qihoo has had a spectacular impact on its …
Phil Muncaster, 03 Jul 2012

Russian botnet suspects cuffed over romantic MMS spyware allegs

Russian cops have arrested two mobile botnet cybercrime suspects as part of an ongoing investigation that's reckoned to be the first of its kind in Russia. The unnamed duo, aged 25 and 24 and both resident in Arkhangelsk (a city in the north of European Russia) were arrested as part of an investigation into attempts to defraud …
John Leyden, 19 Sep 2014
management management1

HP clinches six week extension on whether to join shareholders' suit against Autonomy

HP has said that it has made decisions about how to proceed with a case brought by its shareholders over the $8.8bn writedown for the acquisition of Autonomy – but it wants six more weeks to mull them over. The company was given until last Friday to think about recommendations by a committee of independent directors over the …
The Register breaking news

Whitehall fraud pilots save £12m

The Cabinet Office says data-matching has helped its anti-fraud initiatives to stem huge losses from government funds. The government has said that three pilot projects aimed at tackling the £21bn lost each year through fraud and error have delivered £12m worth of savings in their first few months. According to an interim …
The Register breaking news

Top Tory 'lost voters' personal info' days before ID fraud week

Just days before the start of National Identity Fraud Prevention Week on Monday, the Prime Minister's chief policy advisor Oliver Letwin has been snapped binning what appear to be documents containing personal information in a public park. The discarded documents are said to include the addresses of Letwin's constituents in West …
Anna Leach, 14 Oct 2011
The Register breaking news

Credit crunch pushes US ID fraud to 8 year low

US identity fraud losses fell sharply last year, bucking a long-running trend. The number of fraud victims decreased 28 per cent in 2010 from 11 million to 8.1 million. The total value of fraudulent losses also fell from $56bn in 2009 to $37bn in 2010, according to an annual study by Javelin Strategy & Research. Javelin reports …
John Leyden, 09 Feb 2011
The Register breaking news

Banking Trojan hijacks live chat to run real-time fraud

A new strain of financial malware is hijacking live chat sessions in a bid to hoodwink business banking customers into handing over their banking login credentials or into authorising fraudulent transactions. The attack is being carried out using the Shylock malware platform*, using a configuration that runs a browser-based man- …
John Leyden, 28 Feb 2012

Xbox hackers snared US ARMY APACHE GUNSHIP ware - Feds

Hackers from the US, Canada and Australia have been arrested over a sting that took in the US Army, gaming companies and Microsoft. The Department of Justice accuses the alleged perps of copying software worth more than US$100m. The thieves pinched data and source code relating to then unreleased titles Call of Duty Modern …
Darren Pauli, 01 Oct 2014
channel

Satyam pays $10m to end fraud probe

Indian reseller and outsourcer Mahindra Satyam and its auditor PwC have paid a total of $16m to end a US investigation into fraud charges. The Securities and Exchange Commission said yesterday that failings by five PwC Indian subsidiaries allowed the massive fraud to go undetected for years. It said the problems were not limited …
John Oates, 06 Apr 2011
The Register breaking news

Barclaycard pay-by-bonk fraud risk exposes Amazon's security

Channel 4 News has found out that pay-by-wave phones are compatible with pay-by-wave cards, and wants something done about it, but it's web bazaar Amazon that's lacking basic security. The investigation, which was carried out by viaForensics at Channel 4's behest, discovered that one can lift the credit card number, expiry date …
Bill Ray, 26 Mar 2012

Nvidia builds CUDA GPU programming library for machine learning – so you don't have to

Nvidia has released a set of software routines for accelerating machine-learning algorithms on its parallelized graphics processors. Over the weekend, the GPU maker uploaded cuDNN – CUDA Deep Neural Networks – which is a library of primitives for building software that trains neural networks. The component is optimized for …
Gavin Clarke, 08 Sep 2014