GoFuckYourself.com - Adult Webmaster Forum - View Single Post - Paypal, Bank Of America Are Investigating Massive Fraud

Kimmykim · 08-10-2005, 03:10 PM

PayPal Inc. and Bank of America Corp. say they are investigating claims by Sunbelt Software, an IT security company, that it has uncovered an online ID theft ring that has penetrated 50 U.S. and foreign banks and thousands of computers. "We're aware of the story and are investigating it," a Charlotte, NC-based Bank of America spokesperson tells CardLine. "We have been in contact with Sunbelt and are checking to see if any eBay or PayPal customers are affected," says a spokesperson for San Jose, CA-based PayPal, the online payments arm of eBay Inc. "If we find that they have been compromised, we will contact them." Eric Sites, Sunbelt's vice president of research, tells CardLine that the firm stumbled across the scam while investigating keystroke-logging software. He says the fraudsters are using keystroke-logging software to steal credit card numbers, social security numbers, passwords and other private information from infected computers. The spyware program gets planted on victims' computers when they visit a certain Web site. He declined to name the site. The stolen data is then hosted on a Web server, and contains sufficient information for fraudsters to be able to access bank accounts and credit card information. "The keystroke-logger that Sunbelt has uncovered is basically a backdoor program," Joseph Telafici, director of operations for McAfee Inc.'s Antivirus Vulnerability Emergency Response Team in Santa Clara, CA, tells CardLine. "A backdoor program sends data from an infected computer over the Net to a remote computer and modifies settings on the infected machine so that it can take control of it." The FBI's Tampa office is investigating the ID-theft ring. The FBI did not return calls. Sunbelt has been in touch with the banks affected by the scam, Sites says. Johannes Ullrich, a senior researcher at the SANS Institute, a Bethesda, MD-based IT security research group, tells CardLine that he believes Sunbelt's claims are genuine. "It is not that unusual to come across Web sites that contain stolen card or bank account data," he says. "But it is a lot of work to go through the data and pass it on to the authorities, which is what Sunbelt has done." Sunbelt is based in Clearwater, FL, and it has offices in the UK, France, Germany, Belgium and Sweden.

08-10-2005, 03:10 PM
Kimmykim bitchslapping zebras!!!!! Industry Role: Join Date: Jun 2001 Location: In a shack by the beach Posts: 16,015	Paypal, Bank Of America Are Investigating Massive Fraud PayPal Inc. and Bank of America Corp. say they are investigating claims by Sunbelt Software, an IT security company, that it has uncovered an online ID theft ring that has penetrated 50 U.S. and foreign banks and thousands of computers. "We're aware of the story and are investigating it," a Charlotte, NC-based Bank of America spokesperson tells CardLine. "We have been in contact with Sunbelt and are checking to see if any eBay or PayPal customers are affected," says a spokesperson for San Jose, CA-based PayPal, the online payments arm of eBay Inc. "If we find that they have been compromised, we will contact them." Eric Sites, Sunbelt's vice president of research, tells CardLine that the firm stumbled across the scam while investigating keystroke-logging software. He says the fraudsters are using keystroke-logging software to steal credit card numbers, social security numbers, passwords and other private information from infected computers. The spyware program gets planted on victims' computers when they visit a certain Web site. He declined to name the site. The stolen data is then hosted on a Web server, and contains sufficient information for fraudsters to be able to access bank accounts and credit card information. "The keystroke-logger that Sunbelt has uncovered is basically a backdoor program," Joseph Telafici, director of operations for McAfee Inc.'s Antivirus Vulnerability Emergency Response Team in Santa Clara, CA, tells CardLine. "A backdoor program sends data from an infected computer over the Net to a remote computer and modifies settings on the infected machine so that it can take control of it." The FBI's Tampa office is investigating the ID-theft ring. The FBI did not return calls. Sunbelt has been in touch with the banks affected by the scam, Sites says. Johannes Ullrich, a senior researcher at the SANS Institute, a Bethesda, MD-based IT security research group, tells CardLine that he believes Sunbelt's claims are genuine. "It is not that unusual to come across Web sites that contain stolen card or bank account data," he says. "But it is a lot of work to go through the data and pass it on to the authorities, which is what Sunbelt has done." Sunbelt is based in Clearwater, FL, and it has offices in the UK, France, Germany, Belgium and Sweden.