Press Release
FaceTime Researcher Discovers Stolen Credit Card Details Posted to Internet Forum
BELMONT, CALIF. - December 4, 2007 - Research experts at
FaceTime Security Labs™ today discovered a considerable collection of
stolen credit card details posted on a "Warez Forum," a discussion group
frequented by hackers trading pirated media and video games. The authorities
have been notified.
Some of the exposed credit card details included PIN numbers as well as an
email "receive address" indicating that information had been obtained directly
from a back-end on-line payment system. Further details about this incident can
be found at www.blog.spywareguide.com and on researcher Chris Boyd's personal
blog at www.vitalsecurity.org. Boyd, senior director of malware research for
FaceTime Security Labs, discovered that the credit card data had been
published.
"The odd thing about it was that the person who posted the details didn't
really come across as a professional carder - more like someone who happened to
stumble across a stockpile of sensitive information and was now trying to
distribute it as quickly as he could," said Chris Boyd "This is a case of
stupid criminals at work. The poster happily included all of this information
with a photograph of himself as well as his location listed under his forum
avatar."
FaceTime Security Labs researchers, including Boyd (aka Paperghost), are
constantly searching for malware, botnets, spyware and incidents of hacking of
social networking sites that can compromise personal as well company data.
While this research is conducted and used to protect FaceTime's enterprise
network security customers, occasionally the FSL team uncovers incidents - such
as this one - that are more widespread and affect a wide variety of consumers.
"Everyone takes a security risk when they shop or hang out online, but we can
reduce the risk with some common sense and specific moves," said Boyd. "A
company would never stop using email just because they get SPAM, but everyone
needs to balance the benefits of the Web with ways to avoid the risks."
FaceTime offers the following tips for safe Internet use:
-
Update your browser and your computer with the latest security patches.
-
When entering your credit card data online, be sure that your browser is
showing a closed padlock in the lower right, to show that the site is secure.
-
Be very cautious when you receive an instant message with a link to a Web site
or a download, even from a friend. Many threats spread quickly through IM
messages and then steal personal data. Ask your friend if he or she actually
sent you a link or file before clicking on it.
-
Be wary when installing something from a social networking site. Many credit
card numbers are stolen through spyware applications that people download
without realizing the danger. If you are unsure, go to the official website of
the company that makes the application you need.
-
Before posting anything on a social networking page, consider if you would be
happy handing that information to a stranger.
-
Keep a careful eye on your bank statements and credit report. Call your credit
card company if you see suspicious transactions.
About FaceTime Communications
FaceTime Communications enables the safe and
productive use of instant messaging, Web usage and Unified Communications
platforms. Ranked number one by IDC for four consecutive years, FaceTime's
award-winning solutions are used by more than 900 customers - including nine of
the ten largest U.S. banks - for security, management and compliance of
real-time communications. FaceTime supports or has strategic partnerships with
all leading public and enterprise IM network providers, including AOL, Google,
Microsoft, Yahoo!, Skype, IBM, Reuters, and Jabber.
FaceTime is headquartered in Belmont, California. For more information visit
http://www.facetime.com or call 888-349-FACE. The FaceForward blog, at
http://blog.facetime.com, offers thoughts and opinions about the changing
nature of Internet communications.
PR Contact:
Emily Chamberlin
650-762-2945
echamberlin@ar-edelman.com
|