Police have their work cut out for them as they are cracking down on cybercriminals. Romanian authorities have arrested 25 individuals that are suspected to be part of an international cybergang of thieves that hacked into banks by cloning credit cards and using them to steal over $15 million. The gang is suspected to have over 52 total members composed of Romanians and people of several other nationalities.
According to PC World, the hackers used unauthorized access to steal credit card information associated with various accounts from large corporations in Puerto Rico, the US, Muscat, and Oman. They then used the information to create fake copies of the cards that were distributed to other members of the group that used them to withdraw money from various ATMs in several different locations.
Cybercriminals are banding together to commit costly bank heists
According to the Romanian prosecutors, the withdrawals were performed in batches over short periods of time on non-business days. Romanian authorities executed a search warrant for 42 homes in six cities on Sunday. Laptops and mobile devices of the suspected felons were seized. Gold bars valued at $163,000 weighing two kilograms were also taken.
Various cybergang leaders invested some of the stolen money in real estate and movable goods that are now being placed under restrictions pending an investigation. According to the New York Times, it was discovered that this specific case may also be linked to an even larger $45 million cybercrime campaign first reported by US authorities in 2013.
Members of this cybergang have struck more than once
US prosecutors also described two other cyber heists committed by the gang at one time. The first involved bank cards issued by the National Bank of Ras Al-Khaiman PSC in United Arab Emirates, the second involved bank cards issued by the Bank of Muscat in Oman. This could just be the beginning as it is almost guaranteed that there are still various members of this notorious gang still at large. In the coming months, more potential arrests are sure to be made.
What do you think about the rise in cybercriminal activity involving large sums of money being stolen from banks?
Have a safe (hacker-free) day!
Related Posts:
- Hackers steal up to $1 billion from banks through malware…
- Point of Sale Alert: Staples Investigating Potential Data…
- Warning: Don’t Get Vished
- Nigerian man accused of hacking a bank computer to steal…
- Authorities Crackdown on Gameover Zeus and CryptoLocker
Romanian police arrests cybergang who stole over $15 million from banks
Botnet malware has evolved to become a multipurpose tool that compromises the security of the infected system in several different ways, while building up an army of bots for large scale attacks. The worm Dorkbot is one of the most prevalent IRC based malware families. This threat, also known as Nrgbot is capable of stealing passwords, stopping security updates, downloading more malware, and even launching DDoS attacks using infected systems. Dorkbot is mostly spread via instant messaging services and social networking websites. The malware can also sneak into thumb drives thus creating another source of infection.
This scam appeals to a users sense of curiosity and amplifies it by using enticing trigger words and popular celebrities. While some videos lead to Potentially Unwanted Programs (PUPs) such as adware, others are more serious and lead to data stealing malware that can turn your computer into a zombie as part of a botnet.
In order to combat, users must keep a mindset that almost all of the free offers encountered online are bogus. Always think before you click and if an offer does seem suspicious, contact the company to verify the promotion’s authenticity or check the company’s Facebook page. Never enter your most sensitive credentials on any free surveys and promotional offers that seem too good to be true.
The second most popular Facebook scam is one that supposedly extends Facebook functionality. Users are seemingly presented with options to add a dislike button or embellish their profile with different colors or features, such as this one. This scam centers around a users desire to improve their overall social networking experience. Once a user decides to take advantage of the supposed enhanced Facebook features, cybercriminals can access and steal a user’s most sensitive data and spread malware by use of fake online survey pages. Never enter your data in seemingly suspicious forms or surveys on social media sites.
The scam involves installing a malicious Facebook application that seemingly provides this very functionality. After initially accepting the terms of use for the who viewed my profile application, users may begin to notice strange occurrences such as postings on their Facebook timeline and unauthorized access to pictures and personal information. Unknowingly to the user, their sensitive information and pictures are being used in phishing, fraud, and targeted spam or malware attacks.
In order to combat this type of attack, users must be made aware that finding a legitimate application which reveals high profile details such as how many views or how many viewers you have is highly unlikely. Don’t click on suspicious links to pages that you don’t know where they are taking you and don’t add applications to your Facebook that have not been checked and confirmed to be safe by Facebook’s developers.
Flying thousands of feet in the air can be a scary event for most people; but, now it seems that airway travel may be more dangerous than it has ever been. Potential flaws have been discovered in several new model airplanes that could allow hackers to commandeer the plane by hacking into a single WIFI system using their laptop computer. It is a scary thought to think that a hacker may be sitting next to you on a plane.
An Arkansas lawyer, Matt Campbell, who is representing some ex-cop whistleblowers, received his hard drive with three well known pieces of malware on it after he sent it to the police department. Mr. Campbell had handed his external hard drive to the Fort Smith police department for them to load it with e-mail and other data responding to his discovery request. The police returned it with the requested files but inspection revealed they had added something extra as well.
Staten Island hacker Mario Patrick Chuisano was sentenced to 3 years of imprisonment this Thursday for his involvement in a series of cyber attacks against DirecTV, Farmers Insurance and the Los Angeles Department of Public Works. After his sentencing at the U.S. District Court in Los Angeles, Chuisano was also ordered to pay US$ 2,662,438.80 in restitution to the three victims. The 32-year-old self-taught hacker, an alleged member of the hacking syndicate Swagg Security or SwaggSec was known online by the aliases “fame” and “infam0us”. Chuisano had pleaded guilty to the charges of conspiracy to intentionally cause damage to a protected computer as well as possession of an unregistered sawed-off shotgun earlier in June, 2014.
An important vulnerability labeled “Redirect to SMB” has been uncovered by Cylance. This vulnerability allows attackers to steal sensitive login information using a new technique. All devices running Windows (even the preview of the latest Windows 10) are affected and the list of vulnerable software packages is huge as well. The vulnerability was recently disclosed to the public by Carnegie Mellon University CERT who have been working with the several affected software vendors for the last few weeks to help resolve the issue.
Banking malware Waski is on the rise. This trojan is not really a new threat, it was discovered more than a year back, at the end of 2013, but what is troubling is that it is becoming more and more widespread and claiming victims all around the world. As reported by welivesecurity, the malware initially targeted Switzerland and Germany, but is now beginning to appear in English-speaking regions like Australia, New Zealand, Ireland, United Kingdom, Canada, and the United States. Instead of directly doing its job, Waski downloads another trojan know as Battdil which steals login data by intercepting it or by redirecting users to a phishing website.
Even software giants like YouTube and Google get their fair share of security problems. A few days ago, security researcher Kamil Hismatullin found a critical vulnerability in YouTube which allowed him to delete any video belonging to any user by simply sending a request.