Categorized | Security

Internet Fraud Alert: one-stop service to report stolen data




Internet Fraud Alert, a new global cybersecurity project, aims to fast track the reporting of stolen consumer data, including username and password login information for online services, credit card numbers, and other miscellany researchers find online. The service also alerts banks and online services when accounts they oversee are compromised. Microsoft developed the technology behind the website and donated it to the National Cyber-Forensics and Training Alliance (NCFTA), a nonprofit organization that trains law enforcement agents, academics, and other groups to combat cybercrime. The new project is also supported by Accuity, the American Bankers Association, Anti-Phishing Working Group, Citizens Bank, eBay, the Federal Trade Commission, National Consumers League, and PayPal.

It is often difficult for people who discover vast amounts of stolen credentials stashed on servers and sites such as Pastebin.com to bring it to the attention of the proper authorities. Many organizations don’t bother to make reporting stolen data easy, and even then, it can be difficult to convince a bank or law enforcement that the information found is legitimate. This wasted time could mean the difference between someone’s identity being used for fraud and stopping that before it occurs.

Internet Fraud Alert is a single secure location where researchers can systematically report stolen account credentials and personal information. The service can then match large caches of pilfered passwords and payment card numbers with the organizations responsible for the compromised accounts and alert proper service providers, retailers, financial institutions, and law enforcement.

One weakness of Microsoft’s program is that anonymous submissions are not allowed: it’s possible that corporate whistleblowers will not come forward if they are worried they will get fired, or worse. The overall success of the new service, however, will likely depend on how quickly affected institutions and consumers are notified.

Read the comments on this post

View full post on Security

Related Posts

Comments are closed.

Security Status

Beware Facebook "Timeline" scams http://t.co/W5EW0cVv
5 months ago
Nigerian government (unknowingly) hosts phishing website http://t.co/uQd42ENw
5 months ago
PCMag Awards McAfee All Access its Editors’ Choice: SANTA CLARA, Calif.--(BUSINESS WIRE)--McAfee today announced... http://t.co/FakV7Vd8
5 months ago
RT @mikko: I hadn't noticed Google Maps has added 3D models of buildings. Here's a (very accurate) view of F-Secure HQ in Helsinki http://t.co/IKfAZlak
5 months ago
North Koreans aren't known for their online presence. But others may be lured into clicking Kim Jong-Il 'videos' too http://t.co/yQOon6YT
5 months ago
How to Protect Your Professional Reputation on Facebook Timeline http://t.co/I4bcR2VN
5 months ago
This is pretty impressive from @Softpedia: Facebook scans 2 trillion link clicks and blocks 220 million posts each day http://t.co/vKsn9gNl
5 months ago
Need for integrated approach to security in industrial control systems - http://t.co/tPBCNOow with @PikeResearch
5 months ago
Some free-based music we play at work http://t.co/xu5agZfc
5 months ago
Japan’s cyber defense weapon: a virus. It includes quotes by @Luis_Corrons via @InfosecurityMag
5 months ago