.
/v3-uk/news/1976643/turks-arrest-online-theft-suspects
16 Feb 2007, Matt Chapman , V3
Police in the Turkish city of Izmir have arrested 17 members of a gang accused of stealing $300,000 (£154,000) from internet bank accounts.
Law enforcement agencies alleged that the gang worked alongside three Russian hackers, who provided them with usernames and passwords stolen using spyware.
It is claimed the Russian hackers shared the password information of thousands of unsuspecting Turkish internet users in exchange for 10 per cent of the money stolen.
Hundreds of internet users began to complain about unexpected withdrawals from their online bank accounts in January.
A 20-strong team from the Izmir Organised Crime Bureau investigated the case, discovered the IP addresses of the computers making the illegal transactions, and made simultaneous raids at addresses in Izmir, Fethiye, Didim and Kusadasi.
"In recent years there has been steady growth in the number of viruses and Trojans written to steal banking information from web surfers," said Graham Cluley, senior technology consultant at Sophos.
"Spyware can silently hide on users' computers waiting for them to type in their confidential information and then surreptitiously share it with the hackers."
Cluley applauded the Turkish authorities for looking into the case so speedily, but warned that phishing and spyware is a global problem that requires a global clampdown.
"What's more, all computer users need to defend themselves better against these kind of menaces if they want to continue to bank online safely," he added.
Names of the three suspected Russian hackers have been shared with Interpol.
Do you agree?
If eBay can, why can't the banks?
I read somewhere that eBay are considering implementing 2 factor authentication.
If they do that I think it was mooted at a cost of $5 for the token/key then you'd have to think, wonder why the banks can't.
If eBay get 2 factor authentication working cheaply should we bank with them?
Posted by Alastair Warren, 17 Feb 2007
It's coming!
I am aware of at least one of the major banks in the US currently in the process of developing and implementing just that. I would anticipate concrete developments some time this year.
Posted by Geoff Hizerman, 20 Feb 2007