a Year ago, there were about nine thousand of crimes committed via the Internet and cellular communication, of which disclosed only a thousand, – told “RG” the senior Prosecutor of Department for supervision over investigation, inquiry and operational-investigative activity in authorities of the interior Ministry, the Federal bailiff service, the Federal penitentiary service and Ministry of emergency situations of the Rostov region Sergey Tsvirko.
the cyber fraudsters have incorporated a new virus in your Arsenal
most of the actions of malefactors directed against the elderly or teenagers.
Posing as staff of financial institutions, the attackers on the phone frighten a person’s unauthorized withdrawal of funds or the card has been blocked and trying to find out the payment details, personal details, codes and passwords – anything that can be used to conduct financial transactions without the client’s consent. Here it is necessary to remember that a Bank employee has no right to ask a pin-code, CVC/CVV code three digits on the back of the Bank card, or code that comes in the SMS message.
In any case, illegal withdrawal of money from the Bank card to the victim is required to block it, to inform the Bank by phone “a hot line” about the theft and write to the Bank statement of disagreement with the operation, and then to contact the police. If it turns out that the victim had not reported the cyber criminals information whose disclosure led to the loss of money, the Bank is obliged to compensate the stolen money. However, since the majority of crimes are committed through social engineering, then the victims have to count only that the police catch the fraudsters through the courts to seek redress.
However, the greatest financial losses to banks and commercial structures. However, there is a place for social engineering – phishing (fake) emails.
– It is in the financial sector phishing emails designed most carefully and look the most plausible and about 60 percent include personification, addressing the victim by name, and mention the job responsibilities. Approximately in every fifth case the first object of a sophisticated targeted attacks are web applications, including online banking, – said the Director of business development for information security PJSC “Rostelecom” Andrey Fedorenko.
Experts have called the industry most vulnerable to cyberattack
the Expert noted that even specialized protection for web applications, the WAF will always give one hundred percent secure. The problem is that Internet banking should be available 24/7 and the security system sometimes can not go to the automatic setting. As a result, about 40 percent of the cases, the WAF protocols work without active opposition to hacker attacks.
Scammers are actively using also inconsistencies in the system of electronic settlements between partners. For example, in Rostov-on-don recorded several cases of theft of money using fake online taxi drivers. The attackers on the eve of holidays created fictitious accounts of taxi drivers, have registered their applications through online aggregators and connected to a small cab companies. Then, the virtual created ljepotice in order to write off taxis bonus rubles.
– in Just 25 minutes this way from the account of our UI was removed about 30 thousand rubles. The security service of the company withdrew from solving problems and so we were forced to cancel the option of “automatic withdrawal”. Now the money to the taxi drivers to translate in a manual mode, which takes a lot of time, but safe, – said the representative entrepreneur.
DLa counter hackers many banks have tightened the security policy, in particular, has banned remote access, minimizing user rights and increased control over antivirus protection. As a result, according to Andrey Fedorenko, the number of incidents dropped by about half.