Information from a Federal Bureau of Investigation Press Release — FBI.gov (11/03/09): As part of a continuing effort to identify the latest cyber crime trends and warn the public, the FBI released the following information:
Within the last several months, the FBI has seen a significant increase in fraud involving the exploitation of valid online banking credentials belonging to small and medium businesses, municipal governments, and school districts.
In a typical scenario, the targeted entity receives a “spear phishing” e-mail which either contains an infected attachment, or directs the recipient to an infected website. Once the recipient opens the attachment or visits the website, malware is installed on their computer.
The malware contains a key logger which will harvest each recipient’s business or corporate bank account login information. Shortly thereafter, the perpetrator either creates another user account with the stolen login information or directly initiates funds transfers by masquerading as the legitimate user. These transfers have occurred as both traditional wire transfers and as ACH transfers.
Further reporting has shown that the transfers are directed to the bank accounts of willing or unwitting individuals within the United States. Most of these individuals have been recruited via work-at-home advertisements, or have been contacted after placing resumes on well-known job search websites.
These persons are often hired to “process payments,” or “transfer funds.” They are told they will receive wire transfers into their bank accounts. Shortly after funds are received, they are directed to immediately forward most of the money overseas via wire transfer services such as Western Union and Moneygram.
Customers who use online banking services are advised to contact their financial institution to ensure they are employing all the appropriate security and fraud prevention services their institution offers.
Protecting your computer against malicious software is an ongoing activity and, at minimum, all computer systems need to be regularly patched, have up-to-date anti-virus software, and have a personal firewall installed.
If you have experienced unauthorized funds transfers from your bank accounts, or if you have been recruited via a work-at-home opportunity to receive transfers and forward money overseas, please notify the Internet Crime Complaint Center by filing a complaint at: ic3.gov.
For more information, go to FBI.gov.
(Cyber Crime Photo from FBI.gov)
*********
This column is provided for general information purposes only. Please check with your local law enforcement agency and legal professional for information specific to you and your jurisdiction.
The information in this article is provided “as is”, with all faults, expressed or implied. The author and/or publisher and/or copyright holder makes no guarantee regarding the accuracy or completeness of the information. In no event shall the author and/or publisher and/or copyright holder be liable for any incidental or consequential damages, punitive damages, lost profits, and/or any indirect damages.
