Fraudsters are using innovative ways like Web and mail spoofing, attacking the bank's server etc. to break the security walls and commit fraud. There is a need for arrangements which help presence of integrity, confidentiality and authorization of information.
This quote exactly reflects the present environment related to technology, where it is changing very fast. By the time regulators come up with preventive measures to protect customers from innovative frauds, either the environment itself changes or new technology emerges. This helps criminals to find new areas to commit the fraud.
In this case, the fraudster takes control of the server of the bank and by visiting the bank's website carries out transactions through impersonation.
These attacks are due to bad programming, which mostly prevail in general purpose software. Such attacks are called buffer-over-flow attacks. Due to buffer-over-flow defects in the software, fraudster can use the commands on the server without providing essential information like password etc. |