Measures To Enhance Security Of Digital Transaction

Kaspersky Lab has published the results of an investigation into Genesis – an e-shop
that is trading over 60,000 stolen and legitimate digital identities, making successful
credit card fraud that much easier to conduct.

This marketplace as well as other malicious tools involve abusing the machine-learning based anti-fraud approach of ‘digital masks’: a unique, trusted customer profile based on known device and behaviour characteristics.

Every time we enter our financial, payment and personal information in an online transaction, advanced, analytic, machine learning anti-fraud solutions match us against something called a digital mask. These masks are unique to each user and combine the fingerprints of devices and browsers commonly used to make payments/bank online (like screen and OS information, a range of browser data like headers, time zone, installed plugins, window size etc.) with advanced analytics and machine learning (the individual user’s cookies, online and computer behaviour, etc).

That way, the financial organisations’ anti-fraud teams can determine whether it is truly us entering our credentials, or a malicious carder trying to buy goods using a stolen card, and either approve or deny the transaction, or send it on for further analysis.

However, the digital mask can be copied or created from scratch, and Kaspersky Lab’s
investigation has found that cybercriminals are actively using such digital doppelgangers to
bypass advanced anti-fraud measures.

In February 2019, Kaspersky Lab research uncovered the Genesis Darknet marketplace – an online shop selling stolen digital masks and user accounts at prices ranging from USD5 to USD200 each.

Its customers simply buy previously stolen digital masks together with stolen logins and passwords to online shops and payment services, and then launch them through a browser and proxy connection to mimic real user activity. If they have the legitimate user’s account credentials, the attacker can then access their online accounts or make new, trusted transactions in their name.

“We see a clear trend of carding fraud increasing around the world. While the industry
invests heavily in anti-fraud measures, digital doppelgangers are hard to catch. An
alternative way to prevent the spread of this malicious activity is to shut down the fraudsters’ infrastructure. That is why we urge law enforcement agencies across the world to pay extra Meet Genesis – the underground e-shop with tens of thousands of digital doppelgangers for sale to bypass financial anti-fraud solutions attention to this issue and join the fight,” said Sergey Lozhkin, security researcher, Kaspersky Lab.
Other tools enable attackers to create from scratch their own unique digital masks that won’t
trigger anti-fraud solutions. Kaspersky Lab researchers have investigated one such tool, a
special Tenebris browser with an embedded configuration generator to develop unique
fingerprints. Once created, the carder can simply launch the mask through a browser and
proxy connection and conduct any operations online.
In order to enhance security, Kaspersky Lab recommends businesses implement the
following measures:
 Enable multi-factor authentication at every stage of user validation processes.
 Consider introducing new methods of additional verification, such as biometrics.
 Harness the most advanced analytics for user behaviour.
 Integrate Threat Intelligence feeds into SIEM and other security controls in order to
get access to the most relevant and up-to-date threat data, and to prepare for
possible future attacks.


Please enter your comment!
Please enter your name here

Latest News

MaGIC’s University Startup Challenge 2020 cultivates aspiring leaders

Malaysian Global Innovation & Creativity Centre (MaGIC)’s University Startup Challenge 2020 (USC) was held virtually from June to October this year, with...

GDB secures single-largest RM1.25 billion contract to complete 8 Conlay

Construction services firm GDB Holdings Berhad has secured its single-largest contract of approximately RM1.25 billion to complete the remaining main building works...

Microsoft Malaysia appoints 2 new additions to leadership team

Microsoft Malaysia has appointed two new additions to its leadership team to further strengthen and accelerate the digital growth of customers in...

Funding Societies Malaysia to collaborate with TM Info-Media to offer business financing solutions to MSMEs

Funding Societies Malaysia, a peer-to-peer (P2P) financing platform in the country and Southeast Asia recently collaborated with TM Info-Media Sdn Bhd (TMIM),...

Monash University approves funding for 7 digital health strategic projects

Monash University Malaysia has approved funding for seven digital health strategic projects totaling more than RM2 million. The Monash University Malaysia ‘Network...

Must read

Revitalise the property market for the benefit of all Malaysians

By Wong Siew Lai, General Manager – Malaysia and General Manager - Marketing & Communications, Malaysia Sdn Bhd

Underemployment anxiety needs to be given serious attention

By Sofea Azahar, It is very unfortunate to witness that the unprecedented twin crisis – health and economic –...

How 5G can help us build the urban future

Sunway Group is leading the way to create smart and sustainable cities with great potential As centres of...

IDEAS Opines Business And Economy Will Be Hampered If Parliament Were To Be Suspended

The Institute for Democracy and Economic Affairs (IDEAS) is troubled by several reports that a state of emergency is expected to be...