News

Ransomware gang failed to deploy an attack against 30 US firms

Wilbur Rodgers
June 29, 2020
2 minutes read
377

A ransomware attack was blocked by a group by the Cybersecurity firm Symantec known for demanding payment in Bitcoin (BTC) focused at 30 U.S.-based firms and Fortune 500 companies.

Evil Group almost deployed a ransomware attack but it was successfully blocked after an early warning by Symantec https://t.co/njHM7rHAok

— Cointelegraph (@Cointelegraph) June 28, 2020

The cybersecurity firm states that the malware gang, Evil Group, that was behind the attacks, targeted the IT frameworks of the companies. Still, the firms were notified in time to block the deployment of the ransomware. The ransomware WastedLocker was selected to breach the security of the victims’ networks and unsuccessfully tried to lay the ground for conducting the attacks.

The Evil Group gang is reputed for requesting its victims to pay million-dollar ransom payments in digital currencies. It is reported that the group had been asking for a combined total of $10 from a number of U.S. companies that were recently attacked.

Symantec’s Targeted Attack Cloud Analytics team identified the WastedLocker attacks in the early stages via advanced machine learning to spot patterns of activity linked to recent targeted attacks. 31 companies were attacked in the attack, out of which one of the firms is a U.S.-based subsidiary of an overseas multinational.

The cybersecurity firm’s report stated that the manufacturing sector was most influenced, as the gang focused on five organizations relevant to that industry.

According to Symantec, if the attackers not been caught, “successful attacks could have led to millions in damages, downtime, and a possible domino effect on supply chains.”

Evil Group had stopped its operations until January 2020 because of the indictment of professed members, Igor Olegovich Turashev and Maksim Viktorovich Yakubets.

Disclaimer: No warranty is herein provided that the information contained in this document is accurate, up-to-date, and/or complete. In no circumstance(s), does such information constitute legal or any other advice. Any person who intends to use, rely, pass-on, or re-publish the information contained herein in any way is solely responsible for the same. We suggest to verify the information and/or obtain expert advice independently if required.

Recent Posts

Blog
Multi-Tier Security - Another Line of Defense Against Bank Account Scammers
The banking sector has been witnessing a significant rise in criminal activities is a major concern of security authorities these days. The latest reports revealed that banks have been violating KYC and AML regulations and there were skyrocketing penalties in 2020. Protecting banks and customers is necessary and identity verification is one of the best ways of doing so. However, conventional methods like manual document verification do not suffice for the needs. There must be more robust and automated systems like digital identity verification and video KYC that can enhance the efficiency of the process.

A single line of defence does not work when it comes to technologically advanced fraudsters. There must be layers of security to filter them no matter how hard they try to surpass ID checks. Hence, multi-tier security is what the banking sector needs. Multiple layers of security checks and identity verification methodologies will make it impossible for fraudsters to enter banks.

What is Multi-Tier Security?

Multi-tier security refers to multiple layers of identity verification to enhance security in organisations. Fraudsters are developing sophisticated ways of fulfilling their malicious intent and a single layer of security cannot help companies. Therefore, there must be multiple layers of ID verification that can prevent fraudsters from entering the business.
A Summary of Bank Scams and Frauds

Over time, many different types of frauds and scams have struck the banking industry. Due to advanced technology, not only banks are streamlining their processes, but criminals have also figured out techniques to execute their plans. Many new breeds of scams have surprised organisations, especially banks. Let’s take a look at some of the fraudulent activities.

Account Takeover Fraud

Account takeover (ATO) refers to the fraud in which criminals get illegal access to bank accounts and use them for illicit activities like money laundering and chargebacks. As technology advances, fraudsters have also become sophisticated in committing account takeover fraud. There was a 43 per cent increase in account takeover fraud during the global lockdown in 2020. The numbers are expected to increase this year as well due to rapid digitisation.

New Account Fraud

A new breed of frauds struck the world a few years ago by the name new account fraud. With time, the rate of this fraud has increased and defeated all other kinds of scams. For a new account fraud, fraudsters use stolen, forged, or synthetic identities to open a new bank account, get a new credit/debit card, or loan money from the bank. According to Javelin Strategy, 3.2 million customers were affected by this fraud alone in 2018.

Identity Theft

Identity theft has been a threat to businesses for a very long time. The numbers are continuously increasing and banks are the primary target. Unfortunately, identity theft has taken various forms as well, including child identity theft, medical identity theft, and social identity theft. This enables criminals in making purchases, opening new bank accounts, and enjoying numerous other benefits with false names.

Data Breach

Data breach is a social engineering technique that fraudsters use to acquire customer information. The stolen data is later used for bank account scams, identity theft, and numerous other illegal activities. The identities stolen from a data breach are also used for new account fraud. Around 8,000 data breaches were reported in 2019. In the first half of 2020, 540 data breaches were reported only in the United States according to Statista.

Biometric Authentication – The Additional Security Layer

Biometric authentication is the additional layer of security that not only enhances the level of security, but it is also a rigid measure that fraudsters cannot dodge. Fooling biometrics is not a piece of cake for criminals because biometric authentication requires the live presence of the individual for identity verification. Voice, face, palm, iris, pupil, and retina are some of the biometric traits of an individual that are required for biometric verification.

Biometric verification employs various artificial intelligence models and the following techniques are used for authentication:

3D depth analysis

Micro-expression analysis

Skin texture analysis

Liveness detection

All these techniques ensure the live presence of individuals and any spoof attacks or deepfakes can be identified within seconds.

How will Multi-Tier Security Help Your Bank?

Digital identity verification is a multi-tier security measure that your bank needs. This system has multiple methods of verifying identities that prevent fraudsters from entering the business. Here is how the process of multi-tier security works:

First, the individual has to register on your bank’s website for the identity verification process

Along with the registration details, government-issued ID documents are also submitted

Then, the information submitted is verified with the government-issued ID document

Once the documents are verified, biometric authentication comes in action and face verification checks are performed

Customers have to submit their selfie or video during verification which is matched with the image on the ID document

Lastly, consent verification checks are also performed in which the customer has to submit a handwritten or typed consent note

Conclusion

All in all, verifying identities with the manual method is not an adequate option in the digital world. Digital identity verification is an automated process of verifying identities with layers of security to increase the efficacy of the process. One of the strongest layers in this method is biometric authentication that ensures the live presence of the customer for verification. Fraudsters cannot bypass these checks through any of their techniques. Due to the robustness of this technique, bank account scammers fear from the additional layers of security to verify identities and transactions. Identity theft, account takeover fraud, new account fraud, and data breaches are some of the criminal activities that have increased over time. Now, banks need a multi-tier security system to ensure the security of the customers as well as the organisation.

Get in touch with our experts and learn more about the digital ID verification system and biometric authentication.

Talk to us

Ransomware gang failed to deploy an attack against 30 US firms

A Summary of Bank Scams and Frauds

Account Takeover Fraud

New Account Fraud

Identity Theft

Data Breach

Biometric Authentication – The Additional Security Layer

How will Multi-Tier Security Help Your Bank?

Conclusion

Let’s prove your

customer’s identity

with Shuftipro.

Let’s prove your customer’s

identity with Shuftipro.

Sweden

Cyprus

United Kingdom

Dubai

Бесплатный 15-дневный
тестовый доступ

Ransomware gang failed to deploy an attack against 30 US firms

What is Multi-Tier Security?

A Summary of Bank Scams and Frauds

Account Takeover Fraud

New Account Fraud

Identity Theft

Data Breach

Biometric Authentication – The Additional Security Layer

How will Multi-Tier Security Help Your Bank?

Conclusion

Let’s prove your

customer’s identity

with Shuftipro.

Let’s prove your customer’s

identity with Shuftipro.