New form of online banking fraud making the rounds - GoFuckYourself.com

$5 submissions · 01-04-2012, 05:39 PM

Another year another wave of dirtbags trying hard to make you part with your money....

Apparently, some funky stuff went down during the past holiday season. Keep an eye out for these shenanigans

Source: http://www.readwriteweb.com/enterpri...anking-fra.php

Quote:

As Amit Klein writes on the company's blog, "The malware hides the fraudulent transactions in the view transactions page, as well as artificially changing the total fraudulent transaction amount to balance the totals. As a result, the deceived customer has no idea that their account has been taken over, nor that any fraudulent transactions have taken place." Yikes!

Barry-xlovecam · 01-04-2012, 07:32 PM

Read the comments below the article ...

Quote:

Aaron McPherson Industry analyst covering payments technology since 2000.

It seems to me that there are a few simple ways to defeat this exploit that should have been included in the article.

First, never enter your debit card information when you log in to an online banking site.
No bank will ever request this information of you, so seeing it on a
login screen should be a huge red flag. Get a good anti-virus utility,
and scrub away.

If you think you have been infected, there are other ways to get your transaction history.

You can download the PDF copy of your statement from the online banking site, or use Quicken or some other personal finance manager to download transactions via OFX. You can also use telephone banking or an ATM to get a list of recent transactions. All of these methods are not affected by the exploit Trusteer reports.

Red flag work around.

JustJ · 01-04-2012, 07:39 PM

I'm extremely cautious and protected on my machine. But one day, I was logging into BofA like normal and a screen loads that looks exactly like BofA, but it was asking for my dob, ss#, full card #, etc. Instantly I was like malware! Went to another computer, logged into all banks, changed all pw's etc, then went back and cleaned the PC. It was crazy that something got by malwarebytes, avast, ss&d, etc.

AnalProbe · 01-04-2012, 11:25 PM

Quote:

Originally Posted by JustJ

I'm extremely cautious and protected on my machine. But one day, I was logging into BofA like normal and a screen loads that looks exactly like BofA, but it was asking for my dob, ss#, full card #, etc. Instantly I was like malware! Went to another computer, logged into all banks, changed all pw's etc, then went back and cleaned the PC. It was crazy that something got by malwarebytes, avast, ss&d, etc.

Not crazy at all...

Nothing can protect you against custom made trojans, just for you...

bronco67 · 01-04-2012, 11:34 PM

I had my debit cards somehow magically duplicated by someone on the other side of the country, and they cleaned out my bank account with 5 hour Best Buy and Liquor Store spree. I really wouldn't want to go through some shit like that again.

MrBottomTooth · 01-05-2012, 03:14 AM

What's that in red about not entering your debit card info? That's exactly how my bank requires me to login, so that's not very accurate. (BMO )

Thomas007 · 01-05-2012, 03:55 AM

I guess it was a question of time before it happened.

Barry-xlovecam · 01-05-2012, 08:24 AM

Quote:

Originally Posted by MrBottomTooth

What's that in red about not entering your debit card info? That's exactly how my bank requires me to login, so that's not very accurate. (BMO )

err OK ... I would seriously question that bank's security if more than the last 4 digits are required ...

MrBottomTooth · 01-05-2012, 08:50 AM

Quote:

Originally Posted by Barry-xlovecam

err OK ... I would seriously question that bank's security if more than the last 4 digits are required ...

https://www1.bmo.com/onlinebanking/c...main?product=5

You can enter either your credit card info or your debit card info. Then it shows you an image and a phrase you chose when you intially signed up. If you are using it on a different computer than you normally login from, it will also ask you to answer some security questions.

It's one of the big 5 banks in Canada so I doubt they are slacking in security.

Scott McD · 01-05-2012, 08:54 AM

Digital banking is handy as hell but there is always gonna be huge risks involved...

SmokeyTheBear · 01-05-2012, 09:12 AM

Quote:

Originally Posted by MrBottomTooth

https://www1.bmo.com/onlinebanking/c...main?product=5

You can enter either your credit card info or your debit card info. Then it shows you an image and a phrase you chose when you intially signed up. If you are using it on a different computer than you normally login from, it will also ask you to answer some security questions.

It's one of the big 5 banks in Canada so I doubt they are slacking in security.

if it asks for a full debit card # , that is a huge security hole right there.. there is no need for that. i cant think of any reason to even display that.

p.s. the bigger they are the harder they fall. big banks are the most at risk

asianseekerz · 01-05-2012, 09:15 AM

this is allarming :

Klen · 01-05-2012, 09:19 AM

It's very easy to be secured against offline and online theft of bank account funds-to protect against skimmers on ATM,open a special account and every time when you want to withdraw money transfer money to it from your main account exact amount you plan to withdraw/spend.And to protect online bank account,find bank which have token to enter into internet banking,which means you cant login unless you have that hardware device which generates unique number every time for login.I find it disturbing so many banks dont have any protection beside username and password to login.

MrBottomTooth · 01-05-2012, 09:50 AM

Quote:

Originally Posted by SmokeyTheBear

if it asks for a full debit card # , that is a huge security hole right there.. there is no need for that. i cant think of any reason to even display that.

p.s. the bigger they are the harder they fall. big banks are the most at risk

I'm not sure what other banks you guys use in Canada but I just checked Scotia, CIBC, Royal and TD and they all ask for your debit card numbers.

2ndxachrm · 01-05-2012, 09:55 AM

a good book I read last year was fatal system error. A true accounts of what has been going on for the past 20 years and how these criminals are getting smarter and the process they use to do it. opened my eyes wide open. Trust no one!

vdbucks · 01-05-2012, 09:59 AM

Things like this are exactly why I handle all of my financials from within a sand boxed linux virtual machine.

JFK · 01-05-2012, 10:02 AM

Quote:

Originally Posted by Scott McD

Digital banking is handy as hell but there is always gonna be huge risks involved...

Agreed

geedub · 01-05-2012, 10:13 AM

Quote:

Originally Posted by MrBottomTooth

I'm not sure what other banks you guys use in Canada but I just checked Scotia, CIBC, Royal and TD and they all ask for your debit card numbers.

That is insane. At most we have to give the last 4 of our social over the phone. BofA has a safepass system with a text message code to a specified mobile device as well.

Goldmaniacs · 01-05-2012, 10:50 AM

if it got by malwarebytes, avast, ss&d, etc how were you able to clean it?

Quote:

Originally Posted by JustJ

I'm extremely cautious and protected on my machine. But one day, I was logging into BofA like normal and a screen loads that looks exactly like BofA, but it was asking for my dob, ss#, full card #, etc. Instantly I was like malware! Went to another computer, logged into all banks, changed all pw's etc, then went back and cleaned the PC. It was crazy that something got by malwarebytes, avast, ss&d, etc.

SmokeyTheBear · 01-05-2012, 10:52 AM

Quote:

Originally Posted by MrBottomTooth

I'm not sure what other banks you guys use in Canada but I just checked Scotia, CIBC, Royal and TD and they all ask for your debit card numbers.

tip #1 , don't bank with the top dogs

p.s. i have an account at td that doesn't use a debit card to login as it has no debit card

The way i see it is the larger the bank the more risk you have and less sway.

Go with a smaller established bank . You want to be the 1% not the 99%

01-04-2012, 07:39 PM	#3
JustJ Confirmed User Industry Role: Join Date: May 2011 Posts: 280	I'm extremely cautious and protected on my machine. But one day, I was logging into BofA like normal and a screen loads that looks exactly like BofA, but it was asking for my dob, ss#, full card #, etc. Instantly I was like malware! Went to another computer, logged into all banks, changed all pw's etc, then went back and cleaned the PC. It was crazy that something got by malwarebytes, avast, ss&d, etc. __________________ SMS BILLING / PHONE BILLING / EU DIRECT DEBIT Get Paid For UK Giveaway Entries! START MAKING MORE MONEY TODAY! SKYPE: JUSTJSMS - ICQ: 152263851 - YMSG: JUSTJSMS - EMAIL: jason at p2e dot com

01-04-2012, 11:34 PM	#5
bronco67 Too lazy to set a custom title Join Date: Dec 2006 Posts: 29,032	I had my debit cards somehow magically duplicated by someone on the other side of the country, and they cleaned out my bank account with 5 hour Best Buy and Liquor Store spree. I really wouldn't want to go through some shit like that again. __________________

01-05-2012, 03:14 AM	#6
MrBottomTooth Confirmed User Join Date: Sep 2009 Posts: 5,795	What's that in red about not entering your debit card info? That's exactly how my bank requires me to login, so that's not very accurate. (BMO ) __________________ Get Paid Per Email Like The WEGCASH Days!!!!

01-05-2012, 03:55 AM	#7
Thomas007 Confirmed User Industry Role: Join Date: Aug 2001 Location: AdultReviews.com - Denmark - ICQ: 6565211 Posts: 920	I guess it was a question of time before it happened. __________________ Get your paysite reviewed by Adult Reviews Get your paysite reviewed by Porn Reviews

01-05-2012, 08:54 AM	#10
Scott McD Too lazy to set a custom title Join Date: Nov 2002 Location: Glasgow, Scotland Posts: 67,795	Digital banking is handy as hell but there is always gonna be huge risks involved... __________________ I Buy My High Quality Traffic Here, You Should Too!

01-05-2012, 09:15 AM	#12
asianseekerz Confirmed User Join Date: Aug 2008 Posts: 1,609	this is allarming : __________________ LUSTY LIFES : Dad & Daughter Wild Adventures : Naughty Wild Sister Contact : ICQ : 372109 Email add: [email protected]

01-05-2012, 09:19 AM	#13
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	It's very easy to be secured against offline and online theft of bank account funds-to protect against skimmers on ATM,open a special account and every time when you want to withdraw money transfer money to it from your main account exact amount you plan to withdraw/spend.And to protect online bank account,find bank which have token to enter into internet banking,which means you cant login unless you have that hardware device which generates unique number every time for login.I find it disturbing so many banks dont have any protection beside username and password to login.

01-05-2012, 09:55 AM	#15
2ndxachrm Confirmed User Industry Role: Join Date: Dec 2011 Location: Boston Posts: 353	a good book I read last year was fatal system error. A true accounts of what has been going on for the past 20 years and how these criminals are getting smarter and the process they use to do it. opened my eyes wide open. Trust no one! __________________ Sex. My favorite vice. www.myxxxpornvice.com

01-05-2012, 09:59 AM	#16
vdbucks Monger Cash Industry Role: Join Date: Jul 2010 Posts: 2,773	Things like this are exactly why I handle all of my financials from within a sand boxed linux virtual machine.