Software Is Making Fake Automatic Purchases by Compromised Credit Cards

Software Is Making Fake Autmatic Purchases by Compromised Credit Cards

Hack Intel reported many data breaches during some days. And as a result of that all breaches millions of customers' credit card data is at risk. From identity theft to Bankrupting, data breaches has been found to be root cause of this. Here now researchers with cyber intelligence agency IntelCrawler have noticed that softwares are spreading in underground cyber crime market which automates the sending process of Payment details  to the payment gateways.

Payment Gateways are similar to the Point of Sale, but the main difference between this two is the usage of it to authorize payments. Payment Gateways are generally authorized to approved retailers doing business online. 

InterCrawler noticed that a team named as "Voxis Team" is serving e software called "Voxis Platform" which can use as much as 32 payment gateways including Paypal without any human interference.  Voxis Team is probably located in Eastern Europe who are expert in developing softwares for usage of money launderers. The post was made by one of the marketplace user, going with the handle "Bl4S14y3r"

Voxis Platform Details ( Image Courtesy: IntelCrawler)

The software costs upto $150 and can enable its user to make fake purchases by compromised credit cards so that he/she can get the money easily. Andrew Komarov, CEO of IntelCrawler said in a statement. So it is understandable that any how those fake purchases can be appeared as real ones.

Criminals then open bank accounts and set up merchant account on them. They prepare stolen credit cards and import them to the system and change the details related to it as Templates, time frame, rule to make purchases though those cards.

Attackers can steal merchant account or can get an approved merchant account by setting up a website and turning in stolen documents. The Voxis Team said the only thing that you need to make Voxis Platform work is a webhost with PHP and MySQL support.

With Voxis, users can determine in which time the purchases will be conducted depending on the timezone the cardholder lives in. They can also fill in missing card holder information by using the Pipl.com API.

To be in the safe side, InelCrawler strongly recommends to strengthen know-your-customer(KYC)  due diligence procedures for online processors, payment gateways and e-commerce companies in regard to newly issued merchant accounts and transaction scrubbing thresholds.

Source: Voxis Platform