New card scam: understand how contactless payment fraud works and learn how to protect yourself

[ad_1]

Criminals created ‘false error’ during transaction to allow access to victim data and make improper purchases. Unsplash contactless credit card payment Cybercriminals have developed new variations of a program that causes the blocking of contactless payments at points of sale. By preventing the transaction with the “false error”, the consumer ends up being forced to use the physical credit card, which makes the scam possible. The three recent modifications of Prilex, a malicious program for credit card fraud that makes phantom purchases at ATMs, were disclosed by Kaspersky this Tuesday (31). According to researchers from the cybersecurity company, the Brazilian group is the first to be able to carry out fraud with this transaction technology on infected devices. Fake motoboy scam, card exchange, Whatsapp and fake link: Febraban explains and gives tips on how to avoid Attempted scams by digital means grew 20% in the second quarter of this year in Brazil ‘False error’ appears on machines that are used by criminals Reproduction/ Kaspersky Clearly how it works: the customer, when using the payment of the purchase by approximation, being able to use a credit card, cell phone or even a smart watch, verifies a “false error”. On the screen of the infected machine there is the following message: “Approximation error. Insert the card” or even another version of the phrase (see image above). With this, the victim ends up making the payment in the traditional way by inserting the physical credit card. This process occurs without interruption, as if it were a casual error. However, it is at this point that the victim has the data captured, which ends up being exposed to undue transactions. Criminal scheme that creates ‘false error’ in approximation payment Reproduction/ Kaspersky The Prilex criminal group, specializing in financial fraud, installs the virus when they present themselves as employees of the vending machine companies. According to Kaspersky, criminals request maintenance of the device in which a tool that gives remote access to the system is installed. Selection of targets The technique used by Prilex also analyzes whether the target is worth attacking. In the most recent samples analyzed by the researchers, it was verified the possibility of filtering credit cards according to the segment and creating different rules for different segments. With this, criminals can choose to capture card details that are more attractive due to the higher balance and limits. “These transactions are extremely convenient and especially secure, which shows the creativity and technical knowledge of the creators of Prilex with regard to payment methods”, says Fabio Assolini, head of Kaspersky’s Global Research and Analysis Team (GReAT) in Latin America. Also according to Kaspersky, Prilex’s performance has been verified in Latin America since 2014. However, so far, “the most recent changes have only been detected in Brazil, but may be disseminated to other countries and regions”. To protect themselves Consumers who come across the situation should seek alternatives in making payment via Pix, cash or try at another terminal; Check the proof of amounts issued on card invoices; if you have undue expenses, contact the responsible financial institution and file a police report; The retailer must keep devices secure at points of sale. Initial plugin text

[ad_2]

Source link