Cunning malware spreads, going after your bank account

[Dashinka 24,793]

Had a friend tell me the other day that she fell prey to a scammer who called about her bank debit/credit card.  She said it all sounded official, and she gave them the information, and then when she expected them to speak again, they hung up.  Thankfully she realized this was a scam immediately and called the bank to cancel her cards, but it was eye opening.

 

Here is another thing to be wary of.

 

Malware keeps getting smarter at ways to get your money. And a new version of Zeus Panda malware has some scary smarts.

 

According to a blog post by Cisco-owned Talos, the Zeus Panda malware essentially “poisons” Google search results to push fake bank-related results to the top of a key word search. Then, the unwary user, looking for quick answers to a search related to their bank, is fooled into clicking on malicious links.

 

The malware utilizes search engine optimization (SEO) “to make their malicious links more prevalent in the search results…[which] will enable the attacker to quickly obtain credentials, banking and credit card information,” Talos said.

5 PHISHING SCAMS YOU NEED TO BE AWARE OF

"[It's] a clever way...to serve malicious files," a spokesperson for the internet security firm Avast told Fox News. "Although it’s not completely new, it’s rarely seen as a mechanism of spreading malware such as banking Trojans."

 

http://www.foxnews.com/tech/2017/11/10/cunning-malware-spreads-going-after-your-bank-account.html

[Suss&Camm 2,213]

A good modus operandi is to never give out information when you haven't initiated the contact. Gotta stay alert these days - tnx for info

[charmander 692]

Just had a fraud alert on my Chase cc this week. Someone tried to purchase a $25 iTunes card. Cancelled that card, getting a new one. Chase taking care of unauthorized transactions. Their fraud alert system could be annoying especially when you're traveling and missed to setup a travel alert but nevertheless works when it is supposed to work.

[Steeleballz 7,550]

1 hour ago, Suss&Camm said:

A good modus operandi is to never give out information when you haven't initiated the contact. Gotta stay alert these days - tnx for info

 

    

1 hour ago, Bill & Katya said:

Had a friend tell me the other day that she fell prey to a scammer who called about her bank debit/credit card.  She said it all sounded official, and she gave them the information, and then when she expected them to speak again, they hung up.  Thankfully she realized this was a scam immediately and called the bank to cancel her cards, but it was eye opening.

 

Here is another thing to be wary of.

 

Malware keeps getting smarter at ways to get your money. And a new version of Zeus Panda malware has some scary smarts.

 

According to a blog post by Cisco-owned Talos, the Zeus Panda malware essentially “poisons” Google search results to push fake bank-related results to the top of a key word search. Then, the unwary user, looking for quick answers to a search related to their bank, is fooled into clicking on malicious links.

 

The malware utilizes search engine optimization (SEO) “to make their malicious links more prevalent in the search results…[which] will enable the attacker to quickly obtain credentials, banking and credit card information,” Talos said.

5 PHISHING SCAMS YOU NEED TO BE AWARE OF

"[It's] a clever way...to serve malicious files," a spokesperson for the internet security firm Avast told Fox News. "Although it’s not completely new, it’s rarely seen as a mechanism of spreading malware such as banking Trojans."

 

http://www.foxnews.com/tech/2017/11/10/cunning-malware-spreads-going-after-your-bank-account.html

 

    I try to use google as little as possible, but definitely, I would not recommend using it to search for financial or sensitive sites for the reason you listed. One fact to be aware of for people who have a hard time remembering the web address of their financial institution is that it's often going to be on the back of your debit or credit card. 

 

 

[Dashinka 24,793]

3 hours ago, Suss&Camm said:

A good modus operandi is to never give out information when you haven't initiated the contact. Gotta stay alert these days - tnx for info

I know what you mean.  I have had the fraud department from Visa call me occasionally, I always say thank you very much, but I will hang up and call them back using the number on the card.  You also have to question if they start asking for the security code or PIN

Edited November 10, 2017 by Bill & Katya

[Dashinka 24,793]

2 hours ago, charmander said:

Just had a fraud alert on my Chase cc this week. Someone tried to purchase a $25 iTunes card. Cancelled that card, getting a new one. Chase taking care of unauthorized transactions. Their fraud alert system could be annoying especially when you're traveling and missed to setup a travel alert but nevertheless works when it is supposed to work.

It was interesting, a few weeks ago, we went out with some friends and we both used Citi Costco Visas to pay.  The waiter mixed up our cards, but I headed to Korea for work the next day, so I didn’t use the card at all.  I did however put in a travel alert, but it was two weeks before the fraud department called me, and I asked them why didn’t they call me when they saw the card was supposed to be in Korea, but it was being used locally.  Regardless, they did take care of the charges that were not mine.

[Cyberfx1024 7,980]

1 hour ago, Bill & Katya said:

It was interesting, a few weeks ago, we went out with some friends and we both used Citi Costco Visas to pay.  The waiter mixed up our cards, but I headed to Korea for work the next day, so I didn’t use the card at all.  I did however put in a travel alert, but it was two weeks before the fraud department called me, and I asked them why didn’t they call me when they saw the card was supposed to be in Korea, but it was being used locally.  Regardless, they did take care of the charges that were not mine.

I have a Chase Mastercard through/for work that is in my name but it's my work allowed me to have one in order to buy stuff I need for work. As I have said previously on here that I am a Federal employee so that's out there again for y'all to know. But what you may not know is that our cards are one of the ones that consistently hacked on a yearly basis but luckily Chase is really good about the fraud issues because I have had 2 this year alone.

 

I had Chase call me earlier this year to verify some charges I supposedly made on the card. So we went through the whole verification and they asked me if I have used my card in London recently because I have some charges from there they wanted to clear up. So I quickly informed them that I haven't been to London in several years now so those charges were taken off. But I still had to account for them at the end of the month because they showed up on my statement and then as being reversed. 

[TBoneTX 46,122]

11 hours ago, charmander said:

Just had a fraud alert on my Chase cc this week. Someone tried to purchase a $25 iTunes card. Cancelled that card, getting a new one. Chase taking care of unauthorized transactions. Their fraud alert system could be annoying especially when you're traveling and missed to setup a travel alert but nevertheless works when it is supposed to work.

I've learned the hard way to be sure to call Chase ahead of my travels.

Even more vigilant is Banco Popular, which issues the affinity cards for Avianca Airlines.  Holy ever-lovin' mackerel.