Authorized Push Payment (APP) fraud is one of the most damaging forms of digital deception. The pattern repeats itself thousands of times each year: an email from the bank’s security team warning of suspicious activity. A phone call that follows immediately. The caller ID matches. The “fraud prevention officer” knows details about recent transactions.
Within minutes, the victim authorizes a transfer to “protect” their savings — often tens of thousands of pounds. The realization comes too late. The money is already gone. This is Authorised Push Payment (APP) fraud — a crime where the victim themselves, under manipulation, authorizes the transfer. Unlike unauthorized fraud where criminals break into accounts, APP fraud weaponizes human psychology. The victim willingly — though unknowingly — hands over their money.
Read more…
Source: Group IB
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- Polish Banks Hacked using Malware Planted on their own Government Site
February 6, 2017
In what considered to be the largest system hack in the country’s history and a massive attack on the financial sector, several banks in Poland have been infected with malware. What’s surprising? The source of the malware infection is their own financial regulator, the Polish Financial Supervision Authority (KNF) — which, ironically, is meant to keep ...
- Dridex Is Back, Uses New Windows UAC Bypass Method
January 30, 2017
Banking malware Dridex is back and it’s worse, targeting British financial institutions with a new technique that has the capability of bypassing Windows User Account Control. Researchers at security firm Flashpoint detected small phishing and spear-phishing campaigns targeting specific recipients. The messages contained macros in document attachments that allowed the download of the Dridex malware. This User ...
- UK spy agency hires Indian startup for cybersecurity programme
January 27, 2017
The next time a hacker tries to break into a British bank, chances are that technology from a small Indian startup will detect the hack. Earlier this month, Britain’s top communications spy agency GCHQ (Government Communications Headquarters), which had cracked Nazi Germany’s legendary Enigma codes during the Second World War, chose Pune-based cyber security startup ...
- Lloyds Bank Hit with DDoS Attack for Three Days Straight, Reasons Yet Unknown
January 23, 2017
Lloyds Bank was hit with a DDoS attack for three days straight as hackers tried to crash the website, managing to cause intermittent outages for customers on the personal banking websites. It seems that it all happened two weeks ago, starting on January 11 and ending on Friday 13, the Financial Times reports. The largest lender in ...
- Hedge funds to invest more in technology and cyber defence
January 12, 2017
Investments by hedge funds into technology advancement is set to increase in the coming five years, as more executives within the industry become concerned about the impact of technology on their competitiveness. A new report finds that they will leverage a broad range of investment strategies to meet needs, from building their own systems to outsourcing. ...