PYMNTS

JANUARY 27, 2020

Growing attack-related expenses force businesses to remain vigilant against emerging threats, including phishing and other types of fraud that their own employees may willingly or unwillingly perpetuate. The scheme originated from a number of phishing emails that targeted a handful of employees. Fighting the Phishers.

Phishing 99

Phishing Data Breach Breach Fraud Prevention 99

VISTA InfoSec

FEBRUARY 25, 2024

They take advantage of vulnerable software, stolen credentials, tricked employees, business partner access, unencrypted transfers, and even insider threats to penetrate networks. Skilled hackers use sophisticated tools to exploit the slightest weakness in defenses.

Data Breach 223

Data Breach Breach Multifactor Authentication Cybersecurity 223

Fintech News

SEPTEMBER 17, 2024

Major retail banks in Singapore will progressively implement Singpass Face Verification (SFV) over the next three months in a concerted effort to bolster security against phishing scams. SFV will be used in high-risk scenarios to complement existing authentication methods during DT setup.

Verification 108

Verification Scams Financial Crimes Phishing 108

PYMNTS

APRIL 24, 2020

The phishing expedition, as explained by AbnormalSecurity.com , requests the recipient’s signature for PPP documents. Clicking on the link directs users to a page that looks like the authentic Microsoft Office 365 login web page and tries to pilfer the recipient’s corporate credentials.

Phishing 63

Phishing Scams IRS Law Enforcement 63

Braintree

AUGUST 26, 2019

Braintree has supported SMS and authenticator app two-factor authentication in the Control Panel since 2015. Two-factor authentication is a crucial tool for helping protect merchants from unauthorized account access, typically by requiring a time-sensitive code during sign in.

Authentication 52

Authentication Phishing Account Takeovers Breach 52

PYMNTS

JUNE 8, 2020

Tightening Authentication. FIs must use highly secure methods to authenticate customers’ identities and make it difficult for cybercriminals that manage to steal customer information to pass themselves off as legitimate customers. MFA requires customers to prove their identities by providing at least two types of credentials.

Authentication 60

Authentication MFA Phishing Scams 60

The Fintech Times

DECEMBER 18, 2023

They predict that social engineering attacks will surpass ransomware in 2024 due to increased sophistication, AI tools and emerging techniques, leading organisations to bolster cybersecurity defences with AI, scenario testing and multi-factor authentication. Take company-wide training to identify phishing attacks for example.

Cybersecurity 139

Cybersecurity Ransomware RDC Credential 139

PYMNTS

AUGUST 28, 2018

Phishing scams remain one of the most popular ways a cyberattacker can target a small business. But the phishing scam is also evolving to target the C-suite itself. Employees should be trained to identify phishing scams, but the whaling tactic highlights the need for businesses to train their leadership teams, too.

Phishing 40

Phishing Scams Small Business Cybersecurity 40

The Fintech Times

SEPTEMBER 21, 2024

Current plans outline that Singpass Face Verification (SFV) will be used in higher-risk scenarios to strengthen and complement existing authentication methods for DT setup. SFV scans a customer’s face to verify their identity against national records before the customer’s DT can be activated for use.

Verification 72

Verification Scams Financial Crimes Crime 72

PYMNTS

MARCH 27, 2017

Just recently, Instagram joined the ranks of other social networks that allow their users to enable two-factor authentication. Security experts recommend that all users activate two-factor authentication options whenever possible. On Instagram, for example, users can opt into two-factor authentication in their settings.

Authentication 41

Authentication Phishing Scams Credential 41

Fintech News

JUNE 10, 2024

Akira affiliates gain initial access by exploiting vulnerabilities, brute-forcing services like Remote Desktop Protocol (RDP), social engineering, and using compromised credentials. Organisations are advised to enforce strong password policies and implement multi-factor authentication to prevent unauthorised access.

Ransomware 101

Ransomware Authorization Phishing Cybersecurity 101

PYMNTS

JUNE 6, 2019

Security experts are warning about a phishing scam that can help hackers bypass two-factor authentication (2FA). It showed how the scam uses two new tools, Muraena and NecroBrowser, to potentially trick users into sharing their private credentials.

Scams 58

Scams Credential Security Phishing 58

Fintech Finance

AUGUST 29, 2024

Despite the rising popularity of one-time passwords (OTPs) due to their ease of use, they are increasingly vulnerable to online scams such as phishing, SIM swapping and message interception. To confirm the payment, users can use the biometric authentication mechanism features on their device – whether it’s a fingerprint, face scan or PIN.

Visa 105

Visa Security Authentication Payments 105

Fi911

JULY 8, 2024

This type of fraud can take various forms, including identity theft, chargeback fraud, and phishing attacks. Account Takeover Fraud Account takeover fraud involves cybercriminals gaining unauthorized access to a victim’s online account, often through the use of stolen login credentials or phishing schemes.

Account Takeovers 87

Account Takeovers Fraud Detection Phishing Fraud Prevention 87

Fintech News

JANUARY 17, 2024

These measures encompass additional customer authentication, cross-border transfer limit reviews, session management controls, and establishing a bank-to-bank information-sharing platform to safeguard the financial sector from evolving threats. Digital mule networks exploit this, testing stolen credentials across various banks.

Deepfake 120

Deepfake APACS Scams Authentication 120

Fi911

JANUARY 18, 2024

They often accomplish this by obtaining the victim’s login credentials through phishing emails, malware, or other fraudulent means. New Account Fraud A new account is opened using fake or stolen credentials. Multi-Factor Authentication (MFA) Implementing MFA for customer authentication can significantly enhance security.

Account Takeovers 85

Account Takeovers MFA Fraud Detection Credit Cards 85

PYMNTS

JULY 22, 2019

Apps with a possible security flaw, a malware phishing scheme and possibly, payments fraud, all done in the blink of an eye? The phishing campaign targets consumers and also commercial users. The scam also warns users that if they do not verify their credentials immediately they risk temporary suspension of their accounts.

Phishing 72

Phishing Credential Scams Payments 72

PYMNTS

APRIL 12, 2017

Identity company MorphoTrust USA looks to put a dent in tax fraud and theft by adding an additional layer of authentication security into the mix. Users register to receive a credential and verify their identity with a photo of their driver’s license and by taking a selfie. MorphoTrust’s eID works via mobile app.

Authentication 40

Authentication Tax Refunds Tax Scams Credential 40

PYMNTS

JUNE 12, 2019

Compromised credentials are one of the most common causes of security breaches. The technology is FIDO2 compliant, which means that it’s a secure and accommodating standard that lets different devices using different operating systems talk to each other for authentication. “On

Authentication 49

Authentication Phishing Bots Credential 49

PYMNTS

MAY 24, 2017

According to recent research , 71 percent of breaches occur using passwords that were either weak enough to be cracked by bad actors or stolen from an usually unwitting human via a phishing scam. They will come in, do a fake phishing scam, a fake malware download, a fake password request and see how many people follow through with it.

Authentication 40

Authentication Credential Ransomware Phishing 40

Clearly Payments

JULY 16, 2024

To mitigate these risks, retailers can implement robust authentication measures, invest in secure payment gateways , and educate customers about secure online shopping practices. In 2023, 83% of financial institutions reported an increase in phishing attacks. The travel industry saw a 44% increase in phishing attacks in 2023.

Risk 52

Risk Identity Theft Phishing Account Takeovers 52

Seon

JANUARY 29, 2024

In layman’s terms, users may refer to account takeover fraud as account hacking – when they realize someone stole their online credentials. This could be accidental, or more sophisticated, for example following a mass phishing email campaign. What Is Account Takeover Fraud? There are many paths to successful ATO fraud.

Account Takeovers 52

Account Takeovers Accounts Fraud Prevention Fraud Detection 52

Fintech News

MARCH 25, 2024

It typically operates by infecting a user’s device through various means, such as phishing emails, fake apps, or compromised websites. However, behind the scenes, the malware captures the user’s login credentials, account information, and other sensitive data entered into the fake UI.

Mobile Banking 114

Mobile Banking Online and Mobile Banking Identity Theft Credential 114

PYMNTS

JANUARY 20, 2017

In this week’s Hacker Tracker , Radware shares its global cybersecurity research on what’s really motivating cybercriminals, a Gmail phishing attack targets savvy users and the U.S.’s In many cases, experienced or tech savvy users can spot a phishing email scam from a mile away. Money On The (Cybercriminal) Brain.

Phishing 45

Phishing Ransomware EMV CHIPS 45

EBizCharge

OCTOBER 25, 2023

Phishing attacks trick individuals into disclosing their login credentials or other sensitive information through deceptive emails or websites. Social engineering Social engineering can occur when attackers gain access to a system or network by convincing users to provide credentials.

Best Practices 52

Best Practices Data Breach Breach Phishing 52

PYMNTS

MARCH 18, 2020

High-tech schemes like credential stuffing and account takeover (ATOs) have become commonplace, but many fraudsters still rely on a technique that requires comparatively little technical know-how. Other fraudsters may go directly after restaurant employees with phishing schemes, a popular method for gaining access to data.

Phishing 70

Phishing Smishing Fraud Prevention Point-of-Sale (POS) 70

PYMNTS

MARCH 10, 2020

Digital identity solutions are becoming more and more commonplace, especially as consumers grow increasingly aware of the weaknesses of authentication methods like passwords. NatWest Launches Card-Mounted Fingerprint Readers For Contactless Authentication.

Contactless Payments 109

Contactless Payments Authentication Law Enforcement Cross-Border 109

PYMNTS

NOVEMBER 17, 2020

A recent study found that phishing websites and emails spiked as the event drew closer, with many fraudsters using the Amazon brand and logos to trick customers into surrendering their login data and payment card credentials,” per the Digital Fraud Tracker®.

Volume 72

Volume Transactions Account Takeovers Phishing 72

VISTA InfoSec

NOVEMBER 7, 2023

Mutli-Factor Authentication (MFA) isn’t a new concept. What Is Multi-Factor Authentication? Let’s start with another simple definition – multi-factor authentication is any authentication method where more than one criterion has to be satisfied before access is granted to digital assets.

Authentication 130

Authentication MFA Cybersecurity Credential 130

PYMNTS

JANUARY 25, 2021

They often hack into these consumers’ accounts using passwords stolen from other sites that use the same login credentials, for example. But internal threats, such as those that occur when employees’ credentials are compromised in phishing attacks, are just as imperiling and can bypass banks’ external defenses.

Credential 94

Credential Data Breach Phishing Cybersecurity 94

PYMNTS

JULY 21, 2020

Compromised credit card fraud increased 212 percent year over year in 2019, while customer credential leaks increased 129 percent during the same period. Fraudsters are teaming up to rip off FIs, forming elaborate rings that work cooperatively on account takeovers and phishing attempts. billion in 2019, a 15 percent increase over 2018.

Crime 66

Crime Financial Crimes FBI Cybersecurity 66

PYMNTS

NOVEMBER 22, 2019

The practice may have been halted there, at least, but it shines a bit of light on how black markets for (stolen) assets and credentials continue to proliferate around the world and target virtual verticals. Just relying on a username and password is no longer enough, Cavicchia said.

Credential 70

Credential Cybersecurity Push-to-Card Financial Crimes 70

PYMNTS

AUGUST 8, 2018

Phishing emails — 93 percent of which include ransomware, according to ITProPortal — should by no means be ignored. ProofPoint’s report does not underestimate the strength of ransomware attacks via phishing. Another phishing strategy, known as angler phishing, also showed its teeth in Q2.

Ransomware 44

Ransomware Phishing Email Compromise Online and Mobile Banking 44

PYMNTS

APRIL 21, 2020

Business email compromise (BEC), B2B phishing scams, synthetic identities, fake accounts and trillions of aid dollars flooding out at a time of maximum uncertainty make this a fraudster’s paradise.

Scams 63

Scams Automation Phishing Email Compromise 63

PYMNTS

AUGUST 21, 2020

Mobile banking is under constant attack from fraudsters, however, who are targeting both customers’ funds and personal data, such as account numbers, Social Security numbers, payment card data and login credentials.

Blocks 106

Blocks Identity Theft ATM Online and Mobile Banking 106

PYMNTS

NOVEMBER 27, 2017

Recent reports in Security Intelligence said the criminals are deploying custom phishing attacks against business customers of Canadian banks to gain access to their bank credentials, passwords and authentication codes. The emails are sent with PDF attachments designed to hide from detection tools.

Phishing 45

Phishing Treasury Cybersecurity Credential 45

PYMNTS

JULY 1, 2019

They can use individuals’ credentials to gain access to accounts and then obtain stored payment information, allowing them to make purchases or drain accounts of accrued awards points. Such details can also be acquired via phishing schemes. CNP schemes hurt businesses as much as they hurt consumers. Scamming, the Old-fashioned Way.

Account Takeovers 66

Account Takeovers Online and Mobile Banking Data Breach Credit Cards 66