A piece of financial malware called Tatanga attempts to trick online banking users into authorizing rogue money transfers from their accounts as part of the activation procedure for a free credit-card fraud insurance service purportedly provided by their banks, security researchers from Trusteer said Tuesday.Tatanga is an online banking Trojan horse that was first discovered in May 2011. It is able to inject rogue Web pages into browsing sessions and affects nine different browsers, including Internet Explorer, Mozilla Firefox, Google Chrome, Opera and Safari.The malware is known to use social engineering techniques against victims in order to bypass security measures enforced by banks, like one-time passwords (OTPs) or transaction authorization numbers (TANs).A new Tatanga configuration detected recently by Trusteer displays a rogue message inside the browser when the victim authenticates on their bank's website, claiming that their bank is offering free credit-card fraud insurance to all customers.The message claims that the new service is provided in partnership with Visa and MasterCard and covers losses that might result from fraudulent online transactions performed with the victim's credit or debit card. The malware grabs the user's real account balance, rounds it up, and presents the result as the allegedly insured sum.The rogue message includes a bank account number that's supposed to be the victim's new insurance account opened by the bank. However, in reality, this account belongs to a money mule -- an individual paid to receive money from fraudulent activity on behalf of cybercriminals -- said Ayelet Heyman, a security researcher at Trusteer, in a blog post Tuesday.The user is told that to activate the service they need to authorize a transaction from their bank account to their new insurance account. In order to do this, they need to input the transaction authorization code sent by their bank to their mobile phone number.This code allows the malware to finalize the rogue transfer in the background and send the victim's money to the money mule. "In all likelihood, the victim does not expect any funds will be transferred out of their account," Heyman said.The maximum sum that is transferred by the malware in a single transaction is €5,000 or about US$6,500. "We can assume that fraudsters have identified this amount (5,000 Euros) as the upper threshold that triggers the bank to address the transaction as high risk," Heyman said via email.The rogue message displayed by the Tatanga configuration analyzed by Trusteer is written in Spanish, which suggests that it targets users in Spain or other Spanish-speaking countries. The company hasn't seen a version of this attack in a different language yet, but the malware is known to have targeted users in other European countries and the U.S. in the past, Heyman said via email.The Trusteer researcher advises users to call their banks over the phone and check the validity of sudden announcements or requests that appear on banking websites. If an online banking website suddenly starts asking users for sensitive information like card security codes or PIN numbers, it's most likely because of a malware infection, he said via email.Users should also install the security software recommended or supplied by their financial institution and should use some type of browser-based security solution that prevents financial fraud, Heyman said.
Why virtualise your NAS environment?
Most Popular Reviews
- 1 Samsung Galaxy S9+ review: A predictably-exellent flagship uplifted by a standout camera
- 2 Panasonic Lumix G9 review: A mirrorless moulded to the needs of still-shooters
- 3 LG 65E7T Ultra HD OLED TV review: The South Korean thoroughbred is still first past the post
- 4 Hisense takes the fight to home entertainment heavyweights with flagship Series 8 and 9 ULED TVs
- 5 D-Link Omna 180 Cam HD DSH-C310 review
- Evoluent VerticalMouse C Right Wireless review: This upright mouse aims to end your arm pain
- What is a DXOMark Score?
- B&O Launches The Spring/Summer 2018 Collection
- Telstra Sets New Smartphone Speed Record on Samsung Galaxy S9 and S9+
- Interview - Netgear CEO Patrick Lo talks eSports, the NBN and why mesh is the smartphone of home Wi-Fi
PCW Evaluation Team
The printer was convenient, produced clear and vibrant images and was very easy to use
I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.
It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.
Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.
The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.
The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.
- Everything You Can Do, I Can Do Better: Comparing The Google Home’s Assistant To Amazon Echo’s Alexa
- Hands On: Pitting the Apple HomePod against the Sonos One
- MWC 2018: Everything You Need To Know
- Which flagship TV is best? Sony 4K HDR Bravia 2016 versus LG 4K HDR OLED 2016
- 10 Blu-ray movies / Best looking Blu-ray movies
- FTCommunications & Change AnalystOther
- FTSAP HR & Workforce AnalystOther
- TPProject ManagerVIC
- FTTechnical Quality LeadVIC
- FTTechnical Consultant (Security)Other
- TPBusiness AnalystNSW
- TPSharepoint AdministrationQLD
- FTProject Coordinator / Junior Change AnalystOther
- CCOracle E-Business Suite DeveloperQLD
- CCSenior Node.js DeveloperQLD
- FTProject Manager, Capital WorksNSW
- CCBusiness Analyst (Junior - Mid Level)NSW
- FTSenior Systems Engineer (Office 365)Other
- FTData EngineerOther
- TPBusiness AnalystsVIC
- CCiOS Developer - Brisbane locationVIC
- FTSenior iOS Software EngineerOther
- CCMultiple Java Developer roles!VIC
- FTWeb Developer - HTML / CSS / SASSOther
- FTUX/UI DesignerQLD
- FTFull stack .NET Developer (Angular.js, Durandal.js, Node.js)QLD
- TPProject CoordinatorVIC
- FTDocument ControllerSA
- TPSenior Software DeveloperSA
- FTSenior Salesforce Consultant / DeveloperOther