InfoRiskToday (http://www.inforisktoday.co.uk/) has a great article out today, that highlights some of the key developments in the P.F. Chang's breach. While there are no indicators of card fraud yet, we'll be monitoring closely for any activity. Easy Solutions' Bryan Jardine also shares his insights within the piece, noting that "Often the valuation of a card decreases …
I read with interest the news that two 9th graders (14-year olds) in Canada found an online manual for a Bank of Montreal (BMO) ATM machine, and hacked in to Operator mode. The “damage” these two inflicted was to change the ATM surcharge (the amount the ATM owner charges the consumer during the transaction) to …
Over the last decade, I have spent the majority of my time focused on strategic planning for fraud prevention and fraud program enhancements. During this time, I have met and spoken with countless financial and law enforcement professionals who are facing the challenges of ever-changing fraud environments. Due to the nature of fraud, my programs …
This week we were greeted with news of a new banking trojan malware variant named Zberb. This trojan was described breathlessly by the security community as an “evil monster” and a “hybrid beast” in one hyperbole-laced article. Why is Zberb so terrifying and why should we take all of our money out of the bank, …
Mobile Banking offers considerable promise for true interaction with customers as well as key differentiators to attract gen Y consumers. Simple and stronger authentication is key to manage risk and to ensure continued success in the mobile market. The first generation of strong authentication for mobile typically utilized the same authentication factors as the online …
If the high-profile breaches at Target, Nieman Marcus, and legions of other retailers have taught us anything, it’s that we haven’t seen the last of them. Regardless of what security tools and protocols are put in place by retailers -- or really any institution that houses sensitive consumer information – there inevitably will always be …
One of the hardest responsibilities to tackle when it comes to fraud management is identifying and anticipating emergent attacks that seek to exploit your security controls. When I was in charge of rooting out fraud at a well-known financial services company, I spent a lot of time and money designing and deploying fraud solutions, as …
A year after the Twitter-AP event, new security vulnerabilities and breaches (Heartbleed, Target, to name a few) continue to be in the weekly headlines. Organizations affected by those events have taken some measures to prevent them from happening again, and the largest financial services companies are investing heavily in cyber security. JPMorgan Chase, the nation’s …
Today, our research team has confirmed a massive spam campaign leveraging ZeuS GameOver, is now targeting major banks, social networks, and other enterprises. How is the spamming taking place? Hundreds of unsolicited emails, impersonating “Broad Oak Toiletries Ltd”, are targeting these organizations. To inspire trust, the emails have the word Invoice and a few random …
Recently, the Federal Financial Institutions Examination Council (FFIEC) released an alert regarding ATM machine control panels. The guidance aims at addressing a recent wave of ATM cash-out attacks that have been dubbed “Unlimited Operations” by the secret service. The guidance explains that in this kind of attack, criminals gain access to the web-based control panels …
