27 February 2017
visit nextgenbanking.co.uk

Cheque forgers move into 21st century with phishing and malware

24 April 2012  |  6571 views  |  0 cheque

Crooks are using personal details stolen through sophisticated phishing and malware attacks to carry out old-fashioned cheque forgery, says security outfit Trusteer.

The firm claims to have uncovered a scam in an underground forum involving a criminal selling pre-printed, counterfeit cheques linked to corporate bank accounts in the USA, UK and China.

To obtain all the required data - name, address, bank account, routing code and cheque number - fraudsters typically need to get their hands on a physical or scanned version of a real cheque in circulation.

To do this, they take advantage of the fact that many banking Web sites provide access to scanned versions of paid and received cheques, meaning that once they have obtained login credentials through malware and phishing attacks, they can find all the required information.

In addition, before using the cheques, fraudsters can potentially ensure that the victims' account balances are sufficient to approve the transactions.

In the criminal forum, the counterfeiter is offering to supply cheques that use stolen credentials provided by the buyer for just $5 a piece. The price goes up to $50 when credentials are provided as well.

Amit Klein, CTO, Trusteer, says: "This is the latest example of the how criminals can use malware and phishing techniques to make traditional physical fraud schemes more effective. This "cross-channel" approach is helping fraudsters stay one step ahead of even the most sophisticated fraud detection systems deployed online and in the brick and mortar world."

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

US Bank settles cheque imaging patent case

US Bank settles cheque imaging patent case

03 January 2012  |  7229 views  |  0 comments
Six arrested in million pound phishing scam

Six arrested in million pound phishing scam

09 December 2011  |  9786 views  |  2 comments
Banking Trojan hijacks out-of-band SMS security - Trusteer

Banking Trojan hijacks out-of-band SMS security - Trusteer

07 October 2011  |  9960 views  |  4 comments
Massive cheque counterfeiting botnet ring uncovered

Massive cheque counterfeiting botnet ring uncovered

29 July 2010  |  10786 views  |  2 comments

Related company news

 

Related blogs

Create a blog about this story (membership required)
http://www.financialcrimerisk.fiserv.com/aml?r=finextraVisit contisgroup.com

Who is commenting?

A Finextra member Finextra Member Commented on: In wake of Cloudflare...
A Finextra member Finextra Member Commented on: Bank consultancy Zeb o...
A Finextra member Finextra Member Commented on: In wake of Cloudflare...

Top topics

Most viewed Most shared
EBA to relax controversial PSD2 authentication rulesEBA to relax controversial PSD2 authentica...
13333 views comments | 52 tweets | 74 linkedin
RBS to become fintech fund and high street outlet for challenger banks under HMT remedyRBS to become fintech fund and high street...
8759 views comments | 40 tweets | 34 linkedin
BNY Mellon seeks blockchain experts for new emerging biz and tech teamBNY Mellon seeks blockchain experts for ne...
7463 views comments | 7 tweets | 4 linkedin
hands typing furiouslyBlockchain Technology
7238 views 1 | 18 tweets | 7 linkedin
High rate of defaults hit P2P lending sectorHigh rate of defaults hit P2P lending sect...
7088 views comments | 19 tweets | 13 linkedin

Featured job

Six Figure Base + Commission + Stock Options
London

Find your next job