Connect with us

Featured

Meet Genesis: an underground e-shop for hackers

Published

on

Kaspersky Lab has published the results of an investigation into Genesis – an e-shop that is trading over 60,000 stolen and legitimate digital identities, making successful credit card fraud that much easier to conduct. This marketplace as well as other malicious tools involve abusing the machine-learning based anti-fraud approach of ‘digital masks’: a unique, trusted customer profile based on known device and behavior characteristics.

Every time we enter our financial, payment and personal information in an online transaction, advanced, analytic, machine learning anti-fraud solutions match us against something called a digital mask. These masks are unique to each user and combine the fingerprints of devices and browsers commonly used to make payments/bank online (like screen and OS information, a range of browser data like headers, time zone, installed plugins, window size etc.) with advanced analytics and machine learning (the individual user’s cookies, online and computer behavior, etc.). That way, the financial organisations’ anti-fraud teams can determine whether it is truly us entering our credentials, or a malicious carder trying to buy goods using a stolen card, and either approve or deny the transaction, or send it on for further analysis.

However, the digital mask can be copied or created from scratch, and Kaspersky Lab’s investigation has found that cybercriminals are actively using such digital doppelgangers to bypass advanced anti-fraud measures. In February 2019, Kaspersky Lab research uncovered the Genesis Darknet marketplace – an online shop selling stolen digital masks and user accounts at prices ranging from $5 to $200 each. Its customers simply buy previously stolen digital masks together with stolen logins and passwords to online shops and payment services, and then launch them through a browser and proxy connection to mimic real user activity. If they have the legitimate user’s account credentials, the attacker can then access their online accounts or make new, trusted transactions in their name.

“We see a clear trend of carding fraud increasing around the world. While the industry invests heavily in anti-fraud measures, digital doppelgangers are hard to catch. An alternative way to prevent the spread of this malicious activity is to shut down the fraudsters’ infrastructure. That is why we urge law enforcement agencies across the world to pay extra attention to this issue and join the fight,” said Sergey Lozhkin, security researcher, Kaspersky Lab.

Other tools enable attackers to create from scratch their own unique digital masks that won’t trigger anti-fraud solutions. Kaspersky Lab researchers have investigated one such tool, a special Tenebris browser with an embedded configuration generator to develop unique fingerprints. Once created, the carder can simply launch the mask through a browser and proxy connection and conduct any operations online.

In order to enhance security, Kaspersky Lab recommends businesses implement the following measures:

  • Enable multi-factor authentication at every stage of user validation processes.
  • Consider introducing new methods of additional verification, such as biometrics.
  • Harness the most advanced analytics for user behavior.
  • Integrate Threat Intelligence feeds into SIEM and other security controls in order to get access to the most relevant and up-to-date threat data, and to prepare for possible future attacks.

A blog summarising the Digital Doppelgangers threat can be found on Securelist.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Featured

Gaming gets rad at Rand Show

Published

on

With the opening of the 125th Rand Show at Nasrec, south of Johannesburg, today, gamers and cosplayers have a new destination to strut their stuff.

A new addition to the show, the Gaming Entertainment Pavilion, is offering anything from gaming and cosplay to dance-offs and  science displays.

The organisers provided the following information (although several million exclamation marks and exaggerations have been removed!):

Fortnite Tournament

There was a time when Gaming was a considered a solitary pastime, confined to single player consoles; but that truly is a thing of the past with a fully immersive Fortnite Tournament open to all Fortnite afficionados and even those just starting out. Players can battle it out over both show weekends, including a final on each weekend. Family fan clubs can also get in on the action with live broadcasts of the game as it happens across screens – a full-on Fortnite family affair. Sponsored by PlayStation, gamers are truly going to be spoiled and should get in on the action as fast as they can because R 100 000 in cash prizes is up for grabs.

Smart Technology Centre will deliver a super-fast FibreMAX 500Mbps fibre link, wholly dedicated to the gaming pavilion to ensure that absolutely nothing ruins the thrill of the National Fortnite Tournament. 

“As the exclusive connectivity provider, we have gone all out to ensure an amazing experience for gamers,” says Dillynn Els of Smart Technology Centre (STC), an internet service provider (ISP) and IT technology partner. “When it comes to gaming and the best experience possible, it’s all about ensuring we provide a dedicated, uncapped, unshaped connection that makes every second count.”

Keen players can come along and enter on the day, but don’t delay because space is limited.

Fortnite Inspired Dance Off

Visitors can come along and be entertained by the finalists in the Fortnite inspired dance-off. There will be daily dances to enjoy for the entire duration of the show.

Come and play – Cosplay, to be exact.

The stage is set for a celebration of creativity and imagination that is going to be literally out of this world. Super hero heavy weights and masters of the mysterious will be letting their creative vision loose and take part in various Cosplay Tournaments and a visually stunning Cosplay Masquerade. Come see what all the fuss is about and get lost in this world costumes, colour and creative talent.

Games, Games and Science

For those wanting to get their gaming on, there will be three free play areas sponsored by Xbox with a host of games available to play. Xbox will be giving away 3 Xbox 1’s and an awesome Xbox 1X, but you truly have to be in it to win it, so make sure you don’t miss out.

The Kalahari Scientist will be onstage delighting visitors with his explosive displays that are guaranteed to up the ooh and aah factor with audiences young and old.

But wait, there’s more

Along with the larger-than-life gaming entertainment offering, visitors will also get to be the first gamers on SA soil to get a sneak peak of PlayStation’s brand new Mortal Kombat 11. Don’t miss your chance to experience the continuation of this epic saga through a new cinematic story that is more than 25 years in the making. The iconic showcasing brutal battles like never before, along with a host of customisable fighters with enhanced graphics and animations.

Other activities at the Pavilion include VR Experiences, a full-on NAG Nerf Arena, Gaming vendors with awesome gaming content, retailers selling gaming related products and software, and tutorials and workshops on how to improve your gaming skills, Celebrity Fortnite match off for charity.

With huge sponsors such as PlayStation, Xbox, MMS, NAG, SABC 2 and Smart Technology, the Gaming Entertainment Pavilion is geared up to become a hot zone of entertainment.

Win big

In case the entertainment offering just doesn’t get the heart beats racing fast enough, an all-expenses paid trip to TwitchCon USA, sponsored by PlayStation, in conjunction with 94.7 Highveld Stereo, is waiting for one lucky visitor to grab it. Every ticket purchased into the Entertainment Gaming Pavilion qualifies as an entry, so bring the whole family along for the ride.

Tickets to the Gaming Entertainment Pavilion can be purchased at the show for R 20 which gives the ticket holder access for  two hours.

The pavilion will be open from 14h00 to 19h00 weekdays and 10h00 to 19h00 on weekends from 19 to 28 April 2019.

Continue Reading

Featured

Riaad Moosa show debuts on Vodacom Video Play

Published

on

Riaad Moosa’s comedy special, Life Begins, will be the first major local title to be released on Vodacom’s video-on-demand service, Video Play.

As an award-winning comedian, actor, writer and presenter, Riaad Moosa is one of South Africa’s most renowned funny men. His one-man show is available for download on the platform from today, 26 April 2019. Life Begins is rated PG-16L

Vodacom’s says its affordable video-on-demand service, Video Play, has had an incredible uptake since its launch in August 2018, with over 2-million subscribers. 

“But with a proliferation of affordable video-on-demand platforms available to the South African market, what is it that gives Video Play the competitive edge?” it asked in a release this week. “Recognising the consumer’s need for flexibility and freedom of choice, Vodacom has ingeniously developed an adaptable subscription model that puts the power in consumers’ hands. Forget being tied down to a monthly subscription. Video Play gives consumers the liberty of choosing a daily, weekend or even monthly package. 

“Blockbuster movies can even be viewed for a once off cost, without subscription. Furthermore, these bundles can be purchased according to niche categories and genres, from Bollywood movies to gospel music.”

Consumers are able to pay for movies and series by using their airtime or adding it to their bill, eliminating the need for a credit card. Subscribers are also able to purchase video-specific data at a fraction of the regular price to consume constant content without overspending. Daily subscriptions start from R5 a day.

Zunaid Mahomed, Group Digital and Fixed Services Officer, says: “Video Play has enabled the company to provide a seamless and enjoyable customer experience. With the addition of Riaad Moosa’s Life Begins, we’re excited to offer consumers even more quality content and a wider variety of entertainment on demand than ever before. We’re putting quality entertainment, into the hands of anyone with a mobile device and an internet connection.”

Riaad Moosa describes his show as “very philosophical and existential”.

“It involves the normal issues of getting older while at the same time experiencing, at a maturity where I’m supposed to be wise, a world that is completely turned on its head.  It’s about how I negotiate all these things happening around me while trying to maintain a positive attitude. Through my comedic lens, I hope to put a different spin on that and hopefully I can enter my next 40 years with renewed vigour and excitement.”

To access Riaad Moosa’s Life Begins comedy special, register for Video via the Video Play website (www.videoplay.co.za).

Continue Reading

Trending

Copyright © 2019 World Wide Worx