- Seattle socialist: Minimum-wage discussion skewed by ‘right-wing’ GAO analysis
- U.N. warns of Muslim ‘cleansing’ in Central African Republic
- Senate blocks change to military sex assault cases
- Drug mix may have cured child born with HIV, doctors say
- De Blasio’s wife irks former mansion chef with ‘servant’ remark
- Russia’s neighbors shiver amid Putin’s Cold War moves in Ukraine
- New SAT: The essay portion is to become optional
- Military group can’t march to honor the fallen at Boston Marathon due to security changes
- Senate passes bills deleting ‘retarded’ from laws
- China announces biggest military hike in 3 years: We are not ‘boy scouts with spears’
Internet crooks craft creative counterfeiting scam
SAN FRANCISCO (AP) - Think of it as one more reason not to write checks.
Hackers believed to be operating out of Russia have figured out a high-tech way to carry out the decidedly low-tech crime of check fraud, a computer security company says _ writing at least $9 million in fakes against more than 1,200 legitimate accounts.
But these hackers got the account information in an unusual way: They broke into three websites that specialize in a little-known type of business _ archiving check images online.
Check counterfeiting is a crime that savvy Internet criminals usually pass up. After all, it’s far easier for them to make money by stealing credit cards and online banking passwords.
Retailers and other businesses use the sites to store records of all the checks they write. Check-cashing operations use them to sock away images of checks they receive. And some banks pay them to store images of customers’ checks, so the customers can see them when they log in to their online banking accounts.
The criminals downloaded all the images they could find, grabbing bank routing numbers, names and addresses and even signatures of legitimate account holders. They used the information to create their own checks using easy-to-acquire software and printers.
Because all the account information is real and the victims don’t know their accounts have been compromised, the odds of the checks going through are high.
SecureWorks notified the three sites and said they have closed their security holes, but warned that the scam is ongoing and targeting other, similar sites.
“It’s not the standard kind of criminal operation,” Joe Stewart, director of malware research for SecureWorks' Counter Threat Unit, told The Associated Press ahead of the report’s scheduled release Wednesday.
“Check counterfeiting is kind of old school, but these guys have figured out how to make it highly automated,” he said. “They can get all this data and use that to write counterfeit checks all day long.”
The research was being released in conjunction with the Black Hat computer security conference in Las Vegas, which runs Wednesday and Thursday and draws security professionals from around the world to hear about the latest vulnerabilities and attacks and ways to thwart criminals.
Notable presentations this year are to include a demonstration of how to break into widely used ATMs, a talk that was pulled last year by the researcher’s employer after complaints from the ATM maker. Researchers are also expected to discuss vulnerabilities in smart phones and in the technology used to secure online transactions.
A consistent theme at Black Hat, and at the related DefCon conference this weekend in Las Vegas, is that most Internet criminals are now motivated by money rather than mayhem. And they’re getting more clever in their approaches as banks and other valuable targets tighten their security, as SecureWorks‘ three-month investigation into the check-counterfeiting ring found.
TWT Video Picks
- Unemployment insurance vote could happen next week
- Back to the Future: HUVr Tech marketing video goes viral with hoverboard release tease
- MSNBC's Rachel Maddow: Bush to blame for Ukraine
- House defeats Democrats' attempt to rebuke Issa
- Christine O'Donnell eager to re-engage in political debate
- Obama slaps Putin with sanctions, restrictions on visas
- Russias Putin nominated for Nobel Peace Prize
- Rutgers professors to Condi Rice: Go home, and take your speech with you
- Two liberals say Sarah Palin is right: Obama lacks substance
- R-S-P-E-C-T: Find out what it means for Obama
Pope Francis meets his 'mini-me'
Celebrity deaths in 2014
Winter storm hits states — again