Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« McAfee Acquires SafeBoot: The AV Market Ain't What It Used to Be | Main | eBay Hacked Through Old Code »

Botnets Meet Ocean's Eleven: Scamming Online Gambling

A little imagination can go a long way if you have a botnet at your disposal. A Fortnet report describes several ways botnet herders can cheat online gambling services as well as launder money taken from stolen credit cards or earned from illegal drug sales.

Here is one scam described by the report:

For example, a battalion of bots, after taking over unsuspecting computers, might enter an online casino game room, pretending to be real people. The criminal controlling the bots gives each a small amount of dirty money – usually acquired from stolen credit cards or illicit drug sales.

The bots are programmed to wager a certain amount, pick cards and fold if necessary. Then the criminal, or so-called bot master, takes the only seat left, easily winning the fixed game.

After several rounds, the bot leader cashes out and gets a check or wire transfer from the online casino"s payment processor. And the bank, without doing significant digging, is none the wiser.

These laundering botnets can leave banks running afoul of regulations on money laundering, but that isn't the only problem for banks according to the report:

Bots can damage a bank more directly by infecting a computer at the institution itself, Furst said. When that happens, the bots communicate all of the passwords and identity information on the computer or even the entire network.

One bank chief security officer told Furst that a bot took over a computer at his institution in the United States and tried to wire tens of thousands of dollars to Britain.

The bank only discovered the transaction when the British bank officer called the U.S. branch to verify the transaction.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/469

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net