Hackers Now Targeting Gift Cards
Posted by: Timothy Weaver on 03/26/2017 11:13 AM
[
Comments
]
Hackers are now targeting gift cards in their latest attacks.
Using what is being called a GiftGhostBot, the hackers are able to break into and withdraw cash from money-loaded gift cards provided by major retailers around the globe.
Cyber security firm Distil Networks spotted the hack which is attacking almost 1,000 websites worldwide. They launch brute-force attacks against retailer's website to check potential gift card account numbers at a rate of about 1.7 Million numbers per hour. They then request the balance of each account.
If they make a match, they can log into the account without any authorization. They record the numbers and then offer them for sale on the dark web.
The hackers like this scam because "it is typically anonymous and untraceable once stolen."
"Like most sophisticated bot attacks, GiftGhostBot operators are moving quickly to evade detection, and any retailer that offers gift cards could be under attack at this very moment," said Distil Networks CEO Rami Essaid. "To prevent resources from being drained, individuals and companies must work together to prevent further damage."
Retailers are not holding users personal information, so it is up to the card holders to remain vigilant about their unused gift cards.
Source: 2020 Tech
Using what is being called a GiftGhostBot, the hackers are able to break into and withdraw cash from money-loaded gift cards provided by major retailers around the globe.Cyber security firm Distil Networks spotted the hack which is attacking almost 1,000 websites worldwide. They launch brute-force attacks against retailer's website to check potential gift card account numbers at a rate of about 1.7 Million numbers per hour. They then request the balance of each account.
If they make a match, they can log into the account without any authorization. They record the numbers and then offer them for sale on the dark web.
The hackers like this scam because "it is typically anonymous and untraceable once stolen."
"Like most sophisticated bot attacks, GiftGhostBot operators are moving quickly to evade detection, and any retailer that offers gift cards could be under attack at this very moment," said Distil Networks CEO Rami Essaid. "To prevent resources from being drained, individuals and companies must work together to prevent further damage."
Retailers are not holding users personal information, so it is up to the card holders to remain vigilant about their unused gift cards.
Source: 2020 Tech
Comments
