Brics and straws

Brics and straws

Brics Bank has its own limitations, and let us hope it will...
Much ado about execution

Much ado about execution

Effective delivery must be brought to the centre of policy-making...

Information stealing virus detected in online banking space

Jan 19 2014, 16:29 IST
Comments 0
It has been reported that malware campaigns targeting payment card processing. (AP) It has been reported that malware campaigns targeting payment card processing. (AP)
SummaryCyber security sleuths have detected a "black" private information stealing virus in the Indian online banking transactions space and have alerted consumers who swipe debit or credit cards at shopping counters to make payments.

Cyber security sleuths have detected a "black" private information stealing virus in the Indian online banking transactions space and have alerted consumers who swipe debit or credit cards at shopping counters to make payments.

The "severely" spreading virus of the Trojan family has been detected conducting its clandestine operations at the Point of Sale (POS) counters placed at retail terminals after the RBI made it mandatory in December last year for debit cards holders to punch in their PIN every time they make a purchase.

The virus named "Dexter, black POS, memory dump and grabber" can acquire seven aliases when infecting a system and once it is successful in breaching the security protocols of a POS terminal, it steals confidential data like card holder's name, account number, expiration date, CVV code and other discretionary information which could lead to financially compromising and phishing attacks on the card at a later stage.

"It has been reported that malware campaigns targeting payment card processing, point-of-sale (POS), check out systems or equipment are on the rise.

"The common infection vectors for POS system malwares includes phishing emails or social engineering techniques to deliver the malware, use of default or weak credentials, unauthorised access, open wireless networks along with the methods of installing malware as a part of service," a latest advisory issued to the public by the Computer Emergency Response Team (CERT-India) said.

The CERT-In is the nodal department to protect Indian cyberspace and software base infrastructure against any destructive and hacking activities.

The virus is so potent and deadly that once it steals the sensitive data it quietly exits the infected machine without leaving much trail of its existence.

"The malware has routines to collect and parse personal sensitive information from the running processes in memory by enumerating the POS related processes and has procedure to exfiltrate directly without interim storing in the hard disk," the advisory said.

In order to save debit cards from financial frauds and loss of hard earned money of the holder, the RBI had made it mandatory for punching of the PIN of the customer at the POS, which is nothing but an individuals ATM PIN.

A senior official working in the counter-cyber attacks department said while customers should be vigilant about their debit and credit cards activities at sale counters swiping, POS terminals should also firm up their defence mechanisms so that their systems are not compromised.

The agency has suggested some counter-measures against these malware

Single Page Format
Ads by Google

More from BANKING & FINANCE

Reader´s Comments
| Post a Comment
Please Wait while comments are loading...