Top US banks targeted by Mastercard and Visa scam

Hackers are trying to dupe banking customers with copies of the Visa and MasterCard online fraud prevention programs.

Bank security

Hackers have managed to copy the Verified by Visa and MasterCard SecureCode protection features in order to dupe customers at 15 top US banks, a security firm has warned.

Once a secure online banking session has been started on an infected computer, a Zeus Trojan will inject the credit card security program facsimiles into the customer's browser, Trusteer said.

The user will be asked to enter their social security number, credit card number as well as its expiration date and PIN or Card Security Value code.

The fake security programs will also attempt to trick people by claiming that new Federal Deposit Insurance Corporation rules require them to sign up to the Visa and Mastercard services.

This data is then sent back to the hackers who will use it to carry out card not present' transactions with retailers using the Verified by Visa and MasterCard SecureCode services.

By impersonating victims, the fraudsters are able to avoid detection.

"While some users may become suspicious when prompted to enter their credit/debit card information as part of the online banking login process, this attack uses the familiar Visa and MasterCard online fraud prevention programs to make the request appear legitimate," explained Amit Klein, chief technology officer of Trusteer and head of the company's research organisation.

The Zeus Trojan has been the cause of plenty of security worries in recent times.

One in every 100 computers is infected with Zeus, according to Trusteer, and earlier this year RSA Security warned that almost 90 per cent of Fortune 500 companies in the US could have been affected by the malware.

Featured Resources

How to scale your organisation in the cloud

How to overcome common scaling challenges and choose the right scalable cloud service

Download now

The people factor: A critical ingredient for intelligent communications

How to improve communication within your business

Download now

Future of video conferencing

Optimising video conferencing features to achieve business goals

Download now

Improving cyber security for remote working

13 recommendations for security from any location

Download now

Recommended

What is the Computer Misuse Act?
Policy & legislation

What is the Computer Misuse Act?

2 Mar 2021
What is cloud-to-cloud backup?
cloud backup

What is cloud-to-cloud backup?

1 Mar 2021
Lazarus APT hacking group is targeting the defense industry
Security

Lazarus APT hacking group is targeting the defense industry

26 Feb 2021
Microsoft open sources CodeQL queries used in Solorigate inquiry
Security

Microsoft open sources CodeQL queries used in Solorigate inquiry

26 Feb 2021

Most Popular

How to connect one, two or more monitors to your laptop
Laptops

How to connect one, two or more monitors to your laptop

25 Feb 2021
How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

26 Feb 2021
Ransomware operators are exploiting VMware ESXi flaws
ransomware

Ransomware operators are exploiting VMware ESXi flaws

1 Mar 2021