20 September 2017
Find out more

Cheque forgers move into 21st century with phishing and malware

24 April 2012  |  6755 views  |  0 cheque

Crooks are using personal details stolen through sophisticated phishing and malware attacks to carry out old-fashioned cheque forgery, says security outfit Trusteer.

The firm claims to have uncovered a scam in an underground forum involving a criminal selling pre-printed, counterfeit cheques linked to corporate bank accounts in the USA, UK and China.

To obtain all the required data - name, address, bank account, routing code and cheque number - fraudsters typically need to get their hands on a physical or scanned version of a real cheque in circulation.

To do this, they take advantage of the fact that many banking Web sites provide access to scanned versions of paid and received cheques, meaning that once they have obtained login credentials through malware and phishing attacks, they can find all the required information.

In addition, before using the cheques, fraudsters can potentially ensure that the victims' account balances are sufficient to approve the transactions.

In the criminal forum, the counterfeiter is offering to supply cheques that use stolen credentials provided by the buyer for just $5 a piece. The price goes up to $50 when credentials are provided as well.

Amit Klein, CTO, Trusteer, says: "This is the latest example of the how criminals can use malware and phishing techniques to make traditional physical fraud schemes more effective. This "cross-channel" approach is helping fraudsters stay one step ahead of even the most sophisticated fraud detection systems deployed online and in the brick and mortar world."

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

US Bank settles cheque imaging patent case

US Bank settles cheque imaging patent case

03 January 2012  |  9059 views  |  0 comments
Six arrested in million pound phishing scam

Six arrested in million pound phishing scam

09 December 2011  |  9962 views  |  2 comments
Banking Trojan hijacks out-of-band SMS security - Trusteer

Banking Trojan hijacks out-of-band SMS security - Trusteer

07 October 2011  |  10167 views  |  4 comments
Massive cheque counterfeiting botnet ring uncovered

Massive cheque counterfeiting botnet ring uncovered

29 July 2010  |  11017 views  |  2 comments

Related company news

 

Related blogs

Create a blog about this story (membership required)
visit www.abe-eba.eudownload the paper nowvisit www.vasco.com

Who is commenting?

Top topics

Most viewed Most shared
HSBC switches on selfie payments in ChinaHSBC switches on selfie payments in China
11157 views comments | 24 tweets | 40 linkedin
Equifax hack: Visa and Mastercard flag 200k compromised credit cardsEquifax hack: Visa and Mastercard flag 200...
10470 views comments | 6 tweets | 17 linkedin
Dutch bank sentences teenage DDoS culprit to community serviceDutch bank sentences teenage DDoS culprit...
9241 views comments | 6 tweets | 3 linkedin
UAE banks pool cyber security dataUAE banks pool cyber security data
7735 views comments | 5 tweets | 4 linkedin
ING moves into digital wealth management with Scalable CapitalING moves into digital wealth management w...
7514 views comments | 14 tweets | 15 linkedin

Featured job

Competitive base, double ote, benefits
London, UK

Find your next job