A piece of financial malware called Tatanga attempts to trick online banking users into authorizing rogue money transfers from their accounts as part of the activation procedure for a free credit-card fraud insurance service purportedly provided by their banks, security researchers from Trusteer said Tuesday.Tatanga is an online banking Trojan horse that was first discovered in May 2011. It is able to inject rogue Web pages into browsing sessions and affects nine different browsers, including Internet Explorer, Mozilla Firefox, Google Chrome, Opera and Safari.The malware is known to use social engineering techniques against victims in order to bypass security measures enforced by banks, like one-time passwords (OTPs) or transaction authorization numbers (TANs).A new Tatanga configuration detected recently by Trusteer displays a rogue message inside the browser when the victim authenticates on their bank's website, claiming that their bank is offering free credit-card fraud insurance to all customers.The message claims that the new service is provided in partnership with Visa and MasterCard and covers losses that might result from fraudulent online transactions performed with the victim's credit or debit card. The malware grabs the user's real account balance, rounds it up, and presents the result as the allegedly insured sum.The rogue message includes a bank account number that's supposed to be the victim's new insurance account opened by the bank. However, in reality, this account belongs to a money mule -- an individual paid to receive money from fraudulent activity on behalf of cybercriminals -- said Ayelet Heyman, a security researcher at Trusteer, in a blog post Tuesday.The user is told that to activate the service they need to authorize a transaction from their bank account to their new insurance account. In order to do this, they need to input the transaction authorization code sent by their bank to their mobile phone number.This code allows the malware to finalize the rogue transfer in the background and send the victim's money to the money mule. "In all likelihood, the victim does not expect any funds will be transferred out of their account," Heyman said.The maximum sum that is transferred by the malware in a single transaction is €5,000 or about US$6,500. "We can assume that fraudsters have identified this amount (5,000 Euros) as the upper threshold that triggers the bank to address the transaction as high risk," Heyman said via email.The rogue message displayed by the Tatanga configuration analyzed by Trusteer is written in Spanish, which suggests that it targets users in Spain or other Spanish-speaking countries. The company hasn't seen a version of this attack in a different language yet, but the malware is known to have targeted users in other European countries and the U.S. in the past, Heyman said via email.The Trusteer researcher advises users to call their banks over the phone and check the validity of sudden announcements or requests that appear on banking websites. If an online banking website suddenly starts asking users for sensitive information like card security codes or PIN numbers, it's most likely because of a malware infection, he said via email.Users should also install the security software recommended or supplied by their financial institution and should use some type of browser-based security solution that prevents financial fraud, Heyman said.
Gadgets & Things
Most Popular Reviews
- 1 Finally! LG OLED TV 2016 range review
- 2 Huawei Nova Plus smartphone review
- 3 Apple iPhone 7 Plus review: including Portrait Mode
- 4 Google Daydream View VR full, in-depth review
- 5 Google Pixel XL full, in-depth smartphone review: Phones just got smarter
Latest News Articles
- Lavabit developer has a new encrypted, end-to-end email protocol
- Apple sues Qualcomm over patent licensing and $1B in payments
- New details emerge about Intel's super-small Euclid computer for robots
- Microsoft will soon end Office 2013 distribution through Office 365
- Researchers propose a way to use your heartbeat as a password
GGG Evaluation Team
First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.
For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.
The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.
The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.
My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.
- Time to ditch Foxtel and the iQ3: How to replace Foxtel packages with cheaper alternatives
- The top 10 best and worst tech gadgets and products of 2016
- TV of the year award 2016
- What's the difference between an Intel Core i3, i5 and i7?
- Laser vs. inkjet printers: which is better?
- FTBrand Marketing Manager - Premium Entertainment BrandNSW
- FTWeb Front- End DeveloperSA
- FTLife/400 Developers / Programmers - Permanent - North Ryde areaNSW
- FTSOE Team LeaderWA
- CCService Desk Consultant-Baseline Clearance RequiredNSW
- TPSenior Network EngineerNSW
- FTJunior Design Project CoordinatorQLD
- CCICT Strategy ConsultantNSW
- FTLevel 2 Service DeskNSW
- TPSenior Test Analyst - TAFEQLD
- CCTechnical Business Analyst-DevOpsNSW
- FTNetwork EngineerNSW
- FTSecurity Incident / SOC Analyst (Tier 1) - Permanent - North Ryde BasedNSW
- CCEnterprise Solution ArchitectNSW
- CCSystem EngineerSA
- FTApplication Developer - FileNetNSW
- FTLevel 2 Service DeskNSW
- FTTrading Systems EngineerNSW
- CCBig Data Developer - Government - 12 Month Contract - SydneyNSW
- FTMS Exchange System Engineer l PowerShell l Message LabsNSW
- CCSenior Engineer - Finance PackagesQLD
- TPSQL Server DeveloperNSW
- FTInfrastructure Solution ArchitectSA
- CCMicrosoft Devops Engineers - contract - SydneyNSW
- FTLevel 2 Service DeskNSW