IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

McAfee uncovers Europe-wide bank fraud scam

Security vendor hails discovery of malware-mediated bank fraud in new report.

Credit card scam

Security vendor McAfee claims a malware-mediated banking fraud ring has attempted to steal up to 2 billion from accounts in Europe, the United States and Columbia.

In a report, co-authored by McAfee and bank security specialist Guardian Analytics, it is claimed the fraudsters used Zeus and SpyEye malware to siphon off large sums of money from high balance accounts across the globe.

The attack moves quickly and seems worthy of the term 'organised crime'.

However, unlike other Zeus and SpyEye mediated banking scams, this one is far more sophisticated and scalable, the report claims.

"Unlike standard attacks that typically feature live and manual interventions, we have discovered at least a dozen groups now using server-side components and heavy automation," the report states.

"With no human participation required, each attack moves quickly and scales neatly...[and] combines an insider level of understanding of banking transactions systems that appears to be worthy of the term organised crime'."

The report, entitled Dissecting Operation High Roller, includes case studies from different countries where the banking scam has been detected.

In Germany, the hackers targeted 176 accounts whose collective balances exceeded 8 million.

Meanwhile, in the Netherlands, more than 5,000 business accounts were compromised, with the fraudsters attempting to make off with 35.6 million.

During an attack in Colombia, more than a dozen businesses were attacked and each of them had an account balance of between US$500,000 and US$2 million.

David Marcus, director of security research at McAfee, said the report's findings show that cloud-based services are becoming increasingly popular attack targets for fraudsters.

"Building on established Zeus and SpyEye tactics, this [banking fraud] ring adds many breakthroughs, [including] bypasses for physical chip and pin' authentication, automated mule account databases, server-based fraudulent transactions, and attempted transfers to mule business accounts as high as 100,000," said Marcus in a blog post.

Featured Resources

Big data for finance

How to leverage big data analytics and AI in the finance sector

Free Download

Ten critical factors for cloud analytics success

Cloud-native, intelligent, and automated data management strategies to accelerate time to value and ROI

Free Download

Remove barriers and reconnect with your customers

The $260 billion dollar friction problem businesses don't know they have

Free Download

The future of work is already here. Now’s the time to secure it.

Robust security to protect and enable your business

Free Download

Recommended

McAfee and Visa offer 50% off antivirus subscriptions for small businesses
cyber security

McAfee and Visa offer 50% off antivirus subscriptions for small businesses

25 Jul 2022
McAfee Total Protection review: Expensive at full price
antivirus

McAfee Total Protection review: Expensive at full price

2 Nov 2021

Most Popular

How to secure your hybrid workforce
Advertisement Feature

How to secure your hybrid workforce

23 Sep 2022
The human brain is far more complex than AI researchers imagine
artificial intelligence (AI)

The human brain is far more complex than AI researchers imagine

17 Sep 2022
The cryptocurrency implosion shows we’re heading for the end
cryptocurrencies

The cryptocurrency implosion shows we’re heading for the end

29 Sep 2022