Category Archives: SecAlliance

Arrests in Tap-to-Pay Scheme Powered by Phishing

Posted on by

Authorities in at least two U.S. states last week independently announced arrests of Chinese nationals accused of perpetrating a novel form of tap-to-pay fraud using mobile devices. Details released by authorities so far indicate the mobile wallets being used by the scammers were created through online phishing scams, and that the accused were relying on a custom Android app to relay tap-to-pay transactions from mobile devices located in China. Continue reading Arrests in Tap-to-Pay Scheme Powered by Phishing→

Darcula allows tech-illiterate crooks to create, deploy DIY phishing kits targeting any brand

Posted on by

A new, improved version of Darcula, a cat-themed phishing-as-a-service (PhaaS) platform aimed at serving Chinese-speaking criminals, will be released this month and will allow malicious users to create customized phishing kits to target a wider variety… Continue reading Darcula allows tech-illiterate crooks to create, deploy DIY phishing kits targeting any brand→

How Phished Data Turns into Apple & Google Wallets

Posted on by

Carding — the underground business of stealing, selling and swiping stolen payment card data — has long been the dominion of Russia-based hackers. Happily, the broad deployment of more secure chip-based payment cards in the United States has weakened the carding market. But a flurry of innovation from cybercrime groups in China is breathing new life into the carding industry, by turning phished card data into mobile wallets that can be used online and at main street stores. Continue reading How Phished Data Turns into Apple & Google Wallets→

Chinese Innovations Spawn Wave of Toll Phishing Via SMS

Posted on by

Residents across the United States are being inundated with text messages purporting to come from toll road operators like E-ZPass, warning that recipients face fines if a delinquent toll fee remains unpaid. Researchers say the surge in SMS spam coincides with new features added to a popular commercial phishing kit sold in China that makes it simple to set up convincing lures spoofing toll road operators in multiple U.S. states. Continue reading Chinese Innovations Spawn Wave of Toll Phishing Via SMS→