The RSA FraudAction Research Lab announced on Friday it had discovered a digital cache of more than a half million stolen online bank logins, passwords and credit card account numbers, and speculated that a Russian identity theft ring stole the information.
A computer virus called the Sinowal Trojan Horse is to blame for the massive theft, and has been collecting the data since 2006.
The researchers said they are particularly disturbed because of the technical sophistication of the Sinowal Trojan. The virus is programmed to silently take over a user’s computer. It then lurks in the background, watching for the user to access specific websites—banks, credit cards, etc.—and then records and sends that information.
It also has the ability to launch “evil twin” web pages that prompt the user to enter a Social Security number and other identifying information that can then be used to apply for credit cards, mortgages, etc.
LifeLock created eRecon because identities stolen by well organized crimes rings is sold, traded and bought over the Internet. eRecon monitors more than 10,000 websites where identity thieves conduct business, looking for their customers’ Social Security numbers, names, account numbers, etc, indicating their identities have been stolen.
LifeLock immediately notifies the customer if relevant information is detected, and helps them cancel and replace credit cards and bank accounts, and place a freeze on credit files.
LifeLock provides comprehensive identity theft protection to almost 1.5 million customers. Visit LifeLock.com for more information about their award-winning services. Enroll using the LifeLock promo code Defense for 30 days of free service.
Tags: Data breach, Life Lock identity theft protection, LifeLock data breach protection
In July 2006 I received a Visa bill with more than $6,000 in charges on it. Then came the Macy’s bill for almost $2,000. I even got a call from a bill collector about the car payments I was behind on. Of course, none of these bills was really mine, but before the whole thing was over–if it really is over–I was more than $30,000 in debt because someone stole my identity.
All of the debts were finally forgiven, but I’m still fighting to get them off my credit records. I’d estimate that I’ve spent 200 hours working on this, and there’s no telling how much sleep I’ve lost or tears I’ve cried.
When I hear about these kinds of high-tech international rings it’s like being traumatized all over again, because it feels like we can’t really protect ourselves and I could be hit with something like this at anytime.