Threat Intelligence
6/13/2017
10:45 PM
50%
50%

Europol Operation Busts Payment Card Identity Theft Ring

Members of an international crime ring of payment card skimmers who stole more than $500,000 were arrested by a joint multi-national law enforcement operation.

A consortium of international law enforcement agencies arrested 31 members of an international crime ring suspected of stealing more than $500,000 from thousands of Europeans by skimming their data off of payment cards, Europol announced today.

The payment card ring is suspected of pilfering data from 3,000 European citizens and then cloning the information onto bogus payments cards that were used to make illegal purchases in a number of countries outside of Europe.

On average, the group skimmed 400 ATMs each year between 2014 until their arrest. Once they had the data and phony cards, they made illegal purchases at 200 ATMs, which were largely located in the US, according to Europol. The group also hit ATMs in the Dominican Republic, Malaysia, Indonesia, Vietnam, Peru, the Philippines, and Costa Rica.

"If your card allows a foreign transaction, it's either approved or denied right away. After that, it goes through a process that can take a couple days and it's a way the bad guys can build in a buffer," says Morey Haber, vice president of technology at BeyondTrust, in explaining why this payment card ring opted to do all the transactions in countries outside of where the victims lived.

The investigation drew in law enforcement agencies from Europe, Spain, and Bulgaria, which included the Central Investigating Judge number 5, the Public Prosecution Office at the Audiencia Nacional and National Police of Spain, and the General Directorate Combating Organized Crime in Bulgaria, with the support of Eurojust and Europol's European Cybercrime Centre (EC3).

"This successful operation confirms Eurojust's commitment to protect the assets of EU citizens from falling into the hands of cyber fraudsters. An entire criminal network was taken down and, as a result, is no longer able to defraud innocent victims," said Francisco Jimenez-Villarejo, National Member for Spain at Eurojust, in a statement.

People who rarely travel overseas may want to consider asking their card companies to deny any foreign transactions, while companies that operate ATM machines may want to consider purchasing newer machines with safer ATM technology, advised Haber.

He noted that some ATM machines no longer require a user to swipe their card across a magnetic strip and instead allow the card to be laid down horizontally and read by the ATM machine. The new technology is more secure because it moves away from magnetic card strips, which the bad guys use to gleen data with their card skimmers.

Related Content:

Dawn Kawamoto is an Associate Editor for Dark Reading, where she covers cybersecurity news and trends. She is an award-winning journalist who has written and edited technology, management, leadership, career, finance, and innovation stories for such publications as CNET's ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.