carbanak
Latest
Manager of prominent Fin7 hacking group sentenced to 10 years in prison
The manager of a hacking group known as Fin7 has been sentenced to 10 years in prison for his role in an international cybercrime operation that targeted US banks and retailers.
Three men arrested for stealing over 15 million payment cards
US officials announced today that three alleged leaders of the cybercrime group known alternatively as Fin7, Carbanak and the Navigator Group have been arrested in Germany, Poland and Spain and charged with 26 felony counts. The charges include conspiracy, wire fraud, computer hacking, access device fraud and aggravated identity theft. The Department of Justice alleges that Fin7 members have targeted more than 100 US companies, hacked thousands of computer systems and stolen 15 million credit and debit card numbers. The group is said to have breached networks in 47 states and Washington, DC and hacked 6,500 point-of-sale terminals at over 3,600 business locations.
Suspect arrested for cyber bank heists that amassed $1.2 billion
Europol announced today that the suspected leader of an international bank heist scheme has been arrested. The arrest was a result of an investigation that involved a number of cooperating law enforcement groups including the Spanish National Police, Europol, the FBI and the Romanian, Belarusian and Taiwanese authorities. The person was arrested in Alicante, Spain.
A second hacking group is targeting bank systems
It's bad enough that one hacker group has been wreaking havoc on banking systems worldwide, but it's apparently getting worse. Security firm Symantec reports that a second group, Odinaff, has infected 10 to 20 of its customers with malware that can cover up bogus money transfer requests sent through the ubiquitous SWIFT (Society for Worldwide Interbank Financial Telecommunication) messaging system. Most of the attacks targeted Australia, Hong Kong, the UK, the Ukraine and the US. And unlike the initial attackers, Odinaff appears to be a criminal organization (possibly linked to the infamous Carbanak team) rather than a state-sponsored outfit.
Oracle data breach opened credit card payment systems to attack
Data thieves don't always have to go straight to the source to swipe payment details... sometimes, they can take a roundabout route. Oracle has confirmed to security guru Brian Krebs that hackers breached a support portal for Micros, the point-of-sale credit card payment system it acquired in 2014. It's not certain just how many systems were breached (Krebs' sources say over 700), but the intruders had slipped malware on to the portal that would let them grab logins for the companies using Micros. They wouldn't have had direct access to payment data, but there's a chance those account details could be used to slip malware into the credit card systems and then grab sensitive info.
Subtle malware lets hackers swipe over $300 million from banks
It's no secret that hackers see banks as prime targets, but one band of digital thieves is conducting heists on a truly grand scale. Security researchers at Kaspersky have published details of malware attacks that have stolen at least $300 million from financial institutions in 30 countries. The crooks not only trick bank employees into installing a virus (Carbanak) through spoofed email, but spy on staff in order to mimic their behavior and prevent any telltale signs that money is falling into the wrong hands. Many of the attacks focus on shuffling money to outside accounts, although some will send paper cash to ATMs monitored by criminals.
