Attacks/Breaches

11/21/2013
04:00 PM
Connect Directly
Google+
Twitter
RSS
E-Mail
50%
50%

Financial Institution Call Centers Targeted By Social Engineers

One in every 2,500 calls to these sites is from a fraudster trying to steal money, new report says

Online cybercrime sometimes concludes with phone fraud, a multimillion-dollar underground enterprise that often targets financial institution call centers to cash in on bank account and other personal information pilfered online. Phone fraud racked up an average of $42,546 in losses per financial account in the first half of 2013, according to new data released today.

One in every 2,500 phone calls to a financial institution call center is a fraud, and each phone fraud call incurs a loss of 57 cents, the report by Pindrop Security says.

"Fifty-seven cents per call surprised us significantly," says Vijay Balasubramaniyan, CEO at Pindrop Security. "If you're a call center getting 1 million calls, that's $570,000 in phone-based account takeovers. We didn't realize it would be that high.

"We're seeing fraudsters stepping up their games, calling these call centers so well-prepared, and going after accounts with a lot of money in them."

Organized crime rings that perpetrate phone fraud use a blend of social engineering and account manipulation to steal money via wire transfers, account clearinghouse (ACH) transactions, and payment cards. Most of these attackers -- 57 percent -- work in groups of two to 12 people, and about half place calls from mobile devices, one third from voice-over-IP lines, and nearly 15 percent from landline phones.

The typical phone fraudster goes after anywhere from a handful of accounts to hundreds of them, Pindrop says. Many of these actors also have a strong online presence and operate across both the Internet and phone channels of attack.

"They may take over an account online, but they can also get as much information from an online channel and when they have to ... steal money, they actually move to the phone channel," Balasubramaniyan says.

Financial institutions are an obvious target for the attackers, who often conduct online reconnaissance before placing the calls to cash in.

Pindrop says one of the most active phone fraud rings it has seen, nicknamed "West Africa One," includes 12 callers who spoof U.S. phone numbers and conduct fraudulent wire transfers and ACH transactions. The gang has been known to have stolen more than $1 million from one financial institution, and are infamous for placing a high volume of calls to their targets.

Meanwhile, consumers also are getting hit by phone fraud. Pindrop says there were 2.3 million consumer complaints about these calls in the first half of this year -- up from 2.4 million complaints in all of 2012. Nine of the top 10 financial institutions were spoofed in 73,000 complaints filed by consumers of their financial institutions being impersonated.

Pindrop's full report is available here here for download.

Have a comment on this story? Please click "Add Your Comment" below. If you'd like to contact Dark Reading's editors directly, send us a message. Kelly Jackson Higgins is Executive Editor at DarkReading.com. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Why CISOs Need a Security Reality Check
Joel Fulton, Chief Information Security Officer for Splunk,  6/13/2018
Cisco Talos Summit: Network Defenders Not Serious Enough About Attacks
Curtis Franklin Jr., Senior Editor at Dark Reading,  6/13/2018
Four Faces of Fraud: Identity, 'Fake' Identity, Ransomware & Digital
David Shefter, Chief Technology Officer at Ziften Technologies,  6/14/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-8030
PUBLISHED: 2018-06-20
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit (100MB by default). The broker crashes due to the defect. AMQP protocols 0-10 and 1.0 a...
CVE-2018-1117
PUBLISHED: 2018-06-20
ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/CloudForms' playbook inadvertently disclosing admin passwords in the provisioning log. In an environment where logs are shared with other parties, this cou...
CVE-2018-11701
PUBLISHED: 2018-06-20
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVE-2018-11702
PUBLISHED: 2018-06-20
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVE-2018-11703
PUBLISHED: 2018-06-20
FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.