In the wake of the most recent FFIEC guidance published in 2011, many financial institutions and service providers have undertaken very expensive and time-consuming projects to replace the traditional challenge questions and answers that they previously used as a security measure. One of the more popular solutions suggested as an alternative was to provide out-of-band …
One of the biggest challenges when it comes to transaction anomaly detection is managing the large amount of alerts and cases that these solutions tend to generate. Since every alert is a possible case of fraud, efficient management is crucial for following up on cases in a timely manner before any attacks can be perpetrated.
FFIEC Guidance published on December 11, 2013 and effective immediately, addresses mounting risk factors facing financial institutions related to social media. The FFIEC states that all financial institutions should effectively assess and manage risks associated with all activities conducted via social media platforms. These risks include compliance risk, legal risk, reputation risk, and operational risk
As the number of electronic attacks grows daily, the Total Fraud Protection® team is pleased to announce the release of the newest version of Detect Monitoring Service (DMS), our proactive anti-fraud monitoring solution. DMS has a completely redesigned dashboard, with a number of interactive charts and graphs that enable users to more efficiently analyze and …
Late last year, AT&T, Sprint and T-Mobile together announced that they will no longer offer or support Premium SMS services (with Verizon following shortly after). Premium SMS supports things like ordering ring-tones, checking horoscopes and all sorts of other things I have never done. It also supports legions of spammers, shady SMS aggregators and 3rd …
The MITM attack using PAC (Proxy Automatic Configuration) Files is a method of fraud widely used by Brazilian hackers in order to control the HTTP traffic of an infected machine and redirect it to a proxy owned by the delinquent.
On January 21st, another huge batch of over 2 million cards hit the black market forums. After inspection y the Easy Solutions team, it appears that this batch is from the Target breach as well, which took place with some degree of uncertainty between November 27th and December 15. Evidence of the Target breach was …
In light of the Target and Neiman Marcus breaches, many are pointing to EMV “chip and pin” technology as the silver bullet that could have saved Target and its customers a lot of heartache. However, while EMV is a good step forward for card security, it’s inaccurate to say that EMV would have stopped the …
On New Year’s Eve, researchers unveiled that hackers had been able to physically hack into ATMs throughout Europe, using USB drives. This came as little surprise to those who follow ATM security, and understand the inherent weaknesses in the model.
On Jan 4th, we saw a dump of 2 Million cards onto the black market - one of the largest single day drops we've seen in a while. While we can't definitively say what the source of the breach was, the percentage of Extremely High Value cards is significantly higher than we see on average. …
