News Archive

Card Fraud Query

by msecadm4921

Reports that a Russian hacker has pleaded guilty of ripping off WorldPay, the online transaction processor, to the tune of $10 million, have met with a grim smile by Lieberman Software, the US identity management firm.

According to Phil Lieberman, the firm’s president, the methodology used by the 27-year-old hacker is a potential worst-case scenario that he and his team warn potential and existing clients about. "Not only did this guy manage to hack into WorldPay’s systems back in 2008, but he then altered the parameters of the merchant accounts and boosted their online daily limits. From there he withdrew large amounts of cash from ATMs as he travelled the world," he said.

"The case is a fascinating one as, by pleading guilty, it’s unlikely we’ll ever find out how this team of hackers managed to stiff the former RBS card processing division for an incredibly large sum of money," he added.

When you think about it, the only way that Yevgeny Anikin could have increased the withdrawal limits on the merchant accounts was by gaining access to an internal management account with the card processor, he went on to say. The whole affair smacks of a lack of security on privileged accounts, which is an area of security in which we specialise, he said.

As with all major card frauds of this type, however, this case involves the hacker ringleader pleading guilty, thereby preventing the actual processes used by the fraudsters(s) being revealed in an open court, he suggested. "We’ve been through our fraud records and are finding it difficult to come up with a major card fraud case involving hacking where the fraudster(s) have pleaded not guilty, and the case has gone to court," he said, adding that time after time, the fraudsters mysteriously plead guilty, are sentenced and the financial institution gets away without revealing the chinks in their electronic armour.

What are the possibilities of that happening? he asked. "Quite low, actually, especially when you realise that this case was heard in a Siberian court, in a country where all sorts of unusual results come out of the courts, such as political rivals of President Putin mysteriously being incarcerated for years on end," he said. "The bottom line is that you don’t have to be conspiracy theorist to piece together what is happening: the card processing system is far from being infallible, and the banks are going to great lengths to avoid exposing how insecure their systems really are in an open court," he added.

"Of course, if I’m wrong, I’ll be perfectly happy to discuss this issue with WorldPay or any other financial institution whose systems have been hacked and defrauded – and where the criminals have pleaded not guilty."

For more on the Russian $10 million card fraud case:

For more on Lieberman Software:

Related News

  • News Archive

    Hospital Match

    by msecadm4921

    Police Community Support Officer (PCSO) Elizabeth Lake has recently joined West Suffolk Hospital as a match funded PCSO. She has provided services…

  • News Archive

    MPEG-4 Technology

    by msecadm4921

    The new DM-NC40U encoder from JVC uses MPEG-4 technology to create a cost effective way to send and receive video and audio…

  • News Archive

    Hospital Project

    by msecadm4921

    A property marking system has been introduced by Blackburn with Darwen Primary Care Trust. SmartWater is a forensic coding system similar to,…


Subscribe to our weekly newsletter to stay on top of security news and events.

© 2024 Professional Security Magazine. All rights reserved.

Website by MSEC Marketing