Featuring the dark web coronavirus scammers
Kurtis Minder, co - founder and CEO of GroupSense, explains why coronavirus has become a big business for bad players.
Dan Patterson, Senior Producer for CBS News and CNET, interviewed GroupSense co - founder and CEO Kurtis Minder about what people should know when it comes to coronavirus-related scams. The following is an edited transcript of the interview.
Dan Patterson: Kurtis Minder works for GroupSense, and they have been monitoring some of the most horrific coronavirus scams. Kurtis, what do you see right now that people need to pay attention to?
Kurtis Minder: Well, as you know, the incentive money was distributed and when the bad guys saw it, they wanted to take advantage. We almost noticed on the dark web a series of scams and fraud schemes against the banks, small business administration, and the other organizations affected by the incentive money.
You will see a mix of intellectuals who have access to certain processes within the bank. You will see people who say, 'hey, look, I am the middle manager of a bank at a nationwide bank that has the opportunity to approve these types of loans. If you submit certain types of applications, they will provide the templates of course. We will get you agreement with the SBA loans. '
SEE: Coronavirus: Essential IT policies and tools that every business needs (Premium TechRepublic)
What they use as seed data for these particular loan applications is private information, PII data, of people on the dark web. They are kind of combining both the internal threats with the stolen PII data, combining that to create an effective anti-government fraud scheme.
They were wasting no time - it was almost immediately when we started to see the pop ups. In addition to the fraudulent schemes, we also see people basically selling fraudulent tools to help people file certain claims with certain organizations and things like that. We’re just keeping an eye on which ones seemed more reasonable and effective versus which ones are kind of pie in the skies, but there are real threats.
It explains everything from an internal process to which the scheme would be multiplied, including all the necessary forms and then usually furnishing the data. associated with these forms. They would definitely help you take an identity. They pack all of that together in a nice package so that the buyer of the fake equipment does not have to be a solemn carrier. He could be a very ordinary person who knows how to use the Tor browser to access the dark web. It's kind of narrowing down the luxury of the people who can take advantage of the scheme.
The most effective anti-fraud solution is to gain some awareness of where the seed data from the mound is coming from. It is information that enables fraud. Understanding how the fraud schemes are being carried out, how they are being carried out, and working these into the anti-fraud process on both the bank and organizational side is the best way to do it. better at dealing with that.
As you know, the people who do this on the dark web are largely anonymous, so it is very difficult to give those to an individual. Law enforcement, I believe, is sensible - there's not much they can do about it right now, so it's about the anti - fraud programs.