Top US banks targeted by Mastercard and Visa scam

Hackers are trying to dupe banking customers with copies of the Visa and MasterCard online fraud prevention programs.

Bank security

Hackers have managed to copy the Verified by Visa and MasterCard SecureCode protection features in order to dupe customers at 15 top US banks, a security firm has warned.

Once a secure online banking session has been started on an infected computer, a Zeus Trojan will inject the credit card security program facsimiles into the customer's browser, Trusteer said.

The user will be asked to enter their social security number, credit card number as well as its expiration date and PIN or Card Security Value code.

The fake security programs will also attempt to trick people by claiming that new Federal Deposit Insurance Corporation rules require them to sign up to the Visa and Mastercard services.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

This data is then sent back to the hackers who will use it to carry out card not present' transactions with retailers using the Verified by Visa and MasterCard SecureCode services.

By impersonating victims, the fraudsters are able to avoid detection.

"While some users may become suspicious when prompted to enter their credit/debit card information as part of the online banking login process, this attack uses the familiar Visa and MasterCard online fraud prevention programs to make the request appear legitimate," explained Amit Klein, chief technology officer of Trusteer and head of the company's research organisation.

The Zeus Trojan has been the cause of plenty of security worries in recent times.

One in every 100 computers is infected with Zeus, according to Trusteer, and earlier this year RSA Security warned that almost 90 per cent of Fortune 500 companies in the US could have been affected by the malware.

Featured Resources

Report: The State of Software Security

This annual report explores important trends in software security

Download now

A fast guide to finding your cloud solution

One size doesn't fit all in the cloud, so how do you find the best option for your business?

Download now

Digitally perfecting the supply chain

How new technologies are being leveraged to transform the manufacturing supply chain

Download now

Small & Medium Business Trends Report

Insights from 2,000+ business owners and leaders worldwide

Download now
Advertisement

Recommended

Visit/security/internet-security/354417/avast-and-avg-extensions-pulled-from-chrome
internet security

Avast and AVG extensions pulled from Chrome

19 Dec 2019
Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019
Visit/policy-legislation/33757/us-demands-social-media-details-from-visa-applicants
Policy & legislation

US demands social media details from visa applicants

3 Jun 2019

Most Popular

Visit/mobile/28299/how-to-use-chromecast-without-wi-fi
Mobile

How to use Chromecast without Wi-Fi

5 Feb 2020
Visit/hardware/354723/coronavirus-starts-to-take-its-toll-on-the-tech-industry
Hardware

Coronavirus starts to take its toll on the tech industry

6 Feb 2020
Visit/operating-systems/microsoft-windows/354739/windows-7-bug-blocks-users-from-shutting-down-their-pcs
Microsoft Windows

Windows 7 bug blocks users from shutting down their PCs

10 Feb 2020
Visit/in-depth/354726/sonos-speakers-are-environmentally-unsound
In-depth

Sonos speakers are environmentally unsound

9 Feb 2020