28 April 2017
Visit EBAday.com

Cheque forgers move into 21st century with phishing and malware

24 April 2012  |  6626 views  |  0 cheque

Crooks are using personal details stolen through sophisticated phishing and malware attacks to carry out old-fashioned cheque forgery, says security outfit Trusteer.

The firm claims to have uncovered a scam in an underground forum involving a criminal selling pre-printed, counterfeit cheques linked to corporate bank accounts in the USA, UK and China.

To obtain all the required data - name, address, bank account, routing code and cheque number - fraudsters typically need to get their hands on a physical or scanned version of a real cheque in circulation.

To do this, they take advantage of the fact that many banking Web sites provide access to scanned versions of paid and received cheques, meaning that once they have obtained login credentials through malware and phishing attacks, they can find all the required information.

In addition, before using the cheques, fraudsters can potentially ensure that the victims' account balances are sufficient to approve the transactions.

In the criminal forum, the counterfeiter is offering to supply cheques that use stolen credentials provided by the buyer for just $5 a piece. The price goes up to $50 when credentials are provided as well.

Amit Klein, CTO, Trusteer, says: "This is the latest example of the how criminals can use malware and phishing techniques to make traditional physical fraud schemes more effective. This "cross-channel" approach is helping fraudsters stay one step ahead of even the most sophisticated fraud detection systems deployed online and in the brick and mortar world."

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

US Bank settles cheque imaging patent case

US Bank settles cheque imaging patent case

03 January 2012  |  7290 views  |  0 comments
Six arrested in million pound phishing scam

Six arrested in million pound phishing scam

09 December 2011  |  9833 views  |  2 comments
Banking Trojan hijacks out-of-band SMS security - Trusteer

Banking Trojan hijacks out-of-band SMS security - Trusteer

07 October 2011  |  10019 views  |  4 comments
Massive cheque counterfeiting botnet ring uncovered

Massive cheque counterfeiting botnet ring uncovered

29 July 2010  |  10850 views  |  2 comments

Related company news

 

Related blogs

Create a blog about this story (membership required)
Visit capgemini.comFind out morevisit dh.com

Top topics

Most viewed Most shared
Six global banks join Swift DLT trialsSix global banks join Swift DLT trials
7581 views comments | 15 tweets | 36 linkedin
BBVA steps up fintech acquisition strategy with purchase of OpenpayBBVA steps up fintech acquisition strategy...
6864 views comments | 17 tweets | 16 linkedin
Token raises $15.7 million as PSD2 approachesToken raises $15.7 million as PSD2 approac...
5869 views comments | 20 tweets | 20 linkedin
Should central banks open up payment and settlement systems to non-banks?Should central banks open up payment and s...
5736 views comments | 22 tweets | 21 linkedin
hands typing furiouslyMobile Technology, Its Importance, Present...
5542 views 0 | 2 tweets | 1 linkedin

Featured job

to 120K base, £300K ote, stock options
London, UK

Find your next job