Every April, procrastinators hurry to get all of their paperwork together to file their taxes, while accountants also strive to make every minute count. As it turns out, everyone is busy in April, even cybercriminals. The end of tax season is prime time for fake phishing e-mails asking taxpayers to log in and check the …
At the end of 2013, our CTO Dan Ingevaldson made some predictions about how fraud trends would look in 2014. Now that the year is almost one-quarter over, we can already see how the highly dynamic risk landscape has confirmed some of Dan’s worst fears and then some, in addition to providing new threats appearing …
It almost seems like a day doesn’t go by without someone reporting the discovery of hundreds of millions of pieces of user-specific information related to credit and debit cards, e-mail addresses, or log-in credentials being sold on underground markets[1]. If these numbers are true, the banks are paying the price for these leaks in a …
In the wake of the most recent FFIEC guidance published in 2011, many financial institutions and service providers have undertaken very expensive and time-consuming projects to replace the traditional challenge questions and answers that they previously used as a security measure. One of the more popular solutions suggested as an alternative was to provide out-of-band …
One of the biggest challenges when it comes to transaction anomaly detection is managing the large amount of alerts and cases that these solutions tend to generate. Since every alert is a possible case of fraud, efficient management is crucial for following up on cases in a timely manner before any attacks can be perpetrated.
FFIEC Guidance published on December 11, 2013 and effective immediately, addresses mounting risk factors facing financial institutions related to social media. The FFIEC states that all financial institutions should effectively assess and manage risks associated with all activities conducted via social media platforms. These risks include compliance risk, legal risk, reputation risk, and operational risk
As the number of electronic attacks grows daily, the Total Fraud Protection® team is pleased to announce the release of the newest version of Detect Monitoring Service (DMS), our proactive anti-fraud monitoring solution. DMS has a completely redesigned dashboard, with a number of interactive charts and graphs that enable users to more efficiently analyze and …
Late last year, AT&T, Sprint and T-Mobile together announced that they will no longer offer or support Premium SMS services (with Verizon following shortly after). Premium SMS supports things like ordering ring-tones, checking horoscopes and all sorts of other things I have never done. It also supports legions of spammers, shady SMS aggregators and 3rd …
The MITM attack using PAC (Proxy Automatic Configuration) Files is a method of fraud widely used by Brazilian hackers in order to control the HTTP traffic of an infected machine and redirect it to a proxy owned by the delinquent.
On January 21st, another huge batch of over 2 million cards hit the black market forums. After inspection y the Easy Solutions team, it appears that this batch is from the Target breach as well, which took place with some degree of uncertainty between November 27th and December 15. Evidence of the Target breach was …
