Information Security News mailing list archives

KFTC uncovers massive hacking scheme to steal accredited certificates


From: InfoSec News <alerts () infosecnews org>
Date: Mon, 11 Feb 2013 02:28:34 -0600 (CST)

http://nwww.koreaherald.com/view.php?ud=20130211000209

The Korea Herald
2013-02-11

South Korea's financial authority said Monday it has uncovered a large-scale hacking scheme that resulted in the theft of personal financial transaction information of hundreds of bank clients.

According to the Korea Financial Telecommunications and Clearings Institute (KFTC), a group of hackers allegedly stole a total of 461 authenticated certificates, in an apparent bid to withdraw cash from victims' bank accounts.

The KFTC, which settles financial transactions among individuals, said it reported the case to local banks after immediately discarding authenticated certificates to prevent massive financial chaos.

Authenticated certificates refer to electronic methods of identification issued by authorities for financial transactions including online banking, tax payments, and stock trades.

The KFTC said hackers used the so-called "pharming" method, which involves inducing victims to log on to fabricated home pages of local banks, resulting in information leakage.

[...]


______________________________________________
Visit the InfoSec News Security Bookstore
Best Selling Security Books and More!
http://www.shopinfosecnews.org

Current thread: