Online protection rackets target clearing houses

Topics

NEWS Hackers are to threaten online clearing companies to pay up or face denial-of-service attacks on their Web sites, a security expert has predicted.

Credit card firms use clearing companies to authorise consumer transactions from retailers. According to Richard Starnes, director of incident response for Cable and Wireless, hackers will start taking down the Web sites of these companies unless they pay a ransom.

"These attacks are only launched at companies that rely 80 or 90 percent on Internet trading," said Starnes. "And they usually run on thin profit margins. So when [hackers] launch attacks, they hurt and they hurt badly."

Starnes said that by flooding Web sites of clearing houses with data, the attackers would automatically block databases from sending 'accept' or 'deny' commands back to the retailer. It was this that the hacking groups would prey on, he said.

"The organisations that are carrying out DoS attacks know exactly what they are doing," said Starnes. "It's not limited to online gambling. There are other vertical markets that are also being targeted."

A spokeswoman from the National High Tech Crime Unit said: "Any company that does all or most of its business online needs to ensure that its security is up to date and they are flexible to deal with attacks because they are at risk."

Starnes hinted that the small number of attacks he had seen were coming from Russia and Eastern Europe: "It's safe to say that this falls into the category of the usual suspects."

Last year, online betting companies experienced similar attacks. Alan Paller, the director of research for security organisation SANS recently claimed that every online bookie was being hit with the extortion attacks.

Starnes was speaking at the Secure Computing Conference in London.

Post your comment

In order to post a comment you need to be registered and logged in

Log in or create your ZDNet UK account below

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Membership FAQ

ZDNet UK Live

dava4444

took there repos down for Ubuntu (I think there back now but they took a few months). I don't think there is a perfect answer,

1 hour ago by dava4444 on How to build a GUI for a toaster
dava4444

but the community coding and ideas would be gratis, maybe that's why OEM's can be 'slackers' when it comes to Linux. they just sit back and let...

1 hour ago by dava4444 on How to build a GUI for a toaster
dava4444

continued the bad point about that is hardware, a rival OEM can take your development and use it themselves and to retaliate you would have to go...

1 hour ago by dava4444 on How to build a GUI for a toaster
dava4444

continued Okay how about something like Google's approach 'semi-open source'? . the OEM pours cash in to development and code, whilst opening it...

1 hour ago by dava4444 on How to build a GUI for a toaster
dava4444

Hi Adrian em, interesting, yeah okay I can get this vibe, if I wanted VRec on my Tele I would need an embedded and tiny OS and you're totally...

1 hour ago by dava4444 on How to build a GUI for a toaster
dava4444

Hi Adrian been trying to post for three days .this spam bot is a nightmare. Dava

1 hour ago by dava4444 on How to build a GUI for a toaster
dava4444

Hi James I totally agree. The new site makes me want to come and post, but the spam bot refers me at every turn. I even at one point, thought I...

2 hours ago by dava4444 on Spam? Filter Changed?
sameerhere

the future of mobile will be location and context aware. This means, you will have apps that will suggest you depending where you are right...

4 hours ago by sameerhere on Symbian^3 will do resistive multitouch, says Nokia
kenye2009

hello i would like to have some form of a answer to this question as it concerns the goverment i want to know why if your on state benefits as a...

4 hours ago by kenye2009 on ITN to launch ITV online news service
georgiox

love the LHC info. Keep up the good work. May God bless all in volved.

10 hours ago by georgiox on LHC to run for longest continuous period
sgardia

You are quite right. HDS has not been marketing their products well. USPV is miles ahead in terms of ease of use and technology on enterprise...

15 hours ago by sgardia on Will the SUN set on Hitachi Data Systems OEM relationship?
apexwm

Fedora is the same way as well. The yum update system uses "presto" which shrinks the amount of data needed for download. It's a great system....

1 day ago by apexwm on Can you believe it - 2765 kB will be freed?
cybfor

Updated ID cards considered for 2012: [zdnet.co.uk] The government is considering introducing a new generation of ID... http://dlvr.it/KpBZ

cybfor

Google, Viacom trade blows in YouTube copyright spat: [zdnet.co.uk] Google and the US media giant Viacom have issued... http://dlvr.it/Knht

CIMITL

Be sure to include an audio option - eg. a beep tone - to intensify and reiterate the action. This will greatly benefit some consumers and give...

1 day ago by CIMITL
DataSecurityUK

Data disposal is really important to get right. There are standards set by UK and US federal governments to ensure that data is kept secure. If...

1 day ago by DataSecurityUK
chaycon1

Online Fiber Optic Certification Join a talented group of professionals, who are dedicated to Fiber Optic Networking technology. The online course...

1 day ago by chaycon1 on BT launches 40Mbps fibre-based broadband
chaycon1

Online Fiber Optic Certification Join a talented group of professionals, who are dedicated to Fiber Optic Networking technology. The online course...

1 day ago by chaycon1 on Google to build gigabit broadband to the home
J.A. Watson

Hi Dava, I'm glad to hear from you, and glad that you see things from the other side. I think that is the most important point of the whole...

1 day ago by J.A. Watson on Ubuntu 10.04 (Lucid Lynx) and the Latest Tempest
dava4444

please please please please please please kill that spam bot.

1 day ago by dava4444 on ZDNet UK: faster, smarter, still IT all the way

Featured white papers

Achieving PCI Compliance for:Privileged Password Management & Remote Vendor Access

For multi-store outlets, including retail, banking, grocery, gas, hospitality, convenience stores and others, reducing (or avoiding) the cost of in-store system support and maintenance while maintaining compliance with PCI and other requirements has become a strategic challenge.

Download now

Web 2.0 Security Threats: How to Protect Your Enterprise Network

Speaker: Dr. Chenxi Wang, Principal Analyst, Security and Risk Management, Forrester Research, Inc. As Enterprises are increasingly connected to the Internet and as hard organizational boundaries are fast disappearing, security professionals are facing fresh challenges in Enterprise computing.

Download now

MindManager - Tutorial for New Users - Short

This tutorial is for new MindManager users and teaches you how to get started, by creating maps, reading maps and organizing your information.

Download now