08 December 2016
Visit aciworldwide.com

Cheque forgers move into 21st century with phishing and malware

24 April 2012  |  6512 views  |  0 cheque

Crooks are using personal details stolen through sophisticated phishing and malware attacks to carry out old-fashioned cheque forgery, says security outfit Trusteer.

The firm claims to have uncovered a scam in an underground forum involving a criminal selling pre-printed, counterfeit cheques linked to corporate bank accounts in the USA, UK and China.

To obtain all the required data - name, address, bank account, routing code and cheque number - fraudsters typically need to get their hands on a physical or scanned version of a real cheque in circulation.

To do this, they take advantage of the fact that many banking Web sites provide access to scanned versions of paid and received cheques, meaning that once they have obtained login credentials through malware and phishing attacks, they can find all the required information.

In addition, before using the cheques, fraudsters can potentially ensure that the victims' account balances are sufficient to approve the transactions.

In the criminal forum, the counterfeiter is offering to supply cheques that use stolen credentials provided by the buyer for just $5 a piece. The price goes up to $50 when credentials are provided as well.

Amit Klein, CTO, Trusteer, says: "This is the latest example of the how criminals can use malware and phishing techniques to make traditional physical fraud schemes more effective. This "cross-channel" approach is helping fraudsters stay one step ahead of even the most sophisticated fraud detection systems deployed online and in the brick and mortar world."

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

US Bank settles cheque imaging patent case

US Bank settles cheque imaging patent case

03 January 2012  |  7148 views  |  0 comments
Six arrested in million pound phishing scam

Six arrested in million pound phishing scam

09 December 2011  |  9734 views  |  2 comments
Banking Trojan hijacks out-of-band SMS security - Trusteer

Banking Trojan hijacks out-of-band SMS security - Trusteer

07 October 2011  |  9887 views  |  4 comments
Massive cheque counterfeiting botnet ring uncovered

Massive cheque counterfeiting botnet ring uncovered

29 July 2010  |  10722 views  |  2 comments

Related company news

 

Related blogs

Create a blog about this story (membership required)
Find out moreFind out moreVisit aciworldwide.com

Who is commenting?

A Finextra member Finextra Member Commented on: Payments regulator blo...
A Finextra member Finextra Member Commented on: Payments regulator blo...

Top topics

Most viewed Most shared
Guesswork alone can crack Visa card security - Newcastle UniversityGuesswork alone can crack Visa card securi...
7549 views 12 comments | 15 tweets | 27 linkedin
OCC to offer fintech firms bank charter statusOCC to offer fintech firms bank charter st...
7160 views comments | 25 tweets | 15 linkedin
China tops world fintech rankingsChina tops world fintech rankings
7012 views comments | 35 tweets | 30 linkedin
Fed Governor sounds warning on alternative credit scoring dataFed Governor sounds warning on alternative...
6341 views comments | 19 tweets | 20 linkedin
Big tech policy group calls on Trump to promote fintech innovationBig tech policy group calls on Trump to pr...
5761 views comments | 22 tweets | 11 linkedin

Featured job

to Six-Figure Base, Bonus, Benefits
London, UK

Find your next job