Barclays bank in the UK has found itself at the centre of another security scam, this time around someone posed as the bank's chairman and scammed £10,000 out of his personal account.
The fraudster rang a Barclays call centre posing as the bank's chairman, Marcus Agius, and managed to have a new credit card sent out to him under Agius' name.
He then went into a Barclays branch and used the newly issued credit card to withdraw £10,000 out of Agius personal account.
Britain's Sun newspaper reported that Barclay's bosses were 'burning up' with embarrassment.
The scam follows the highly publicised actions of BBC Top Gear presenter Jeremy Clarkson, who published his Barclay's account number in an attempt to prove that the UK's largest ever data breach was nothing to fuss over.
A cheeky reader subsequently used the details to help Clarkson 'donate' £500 to a UK charity .
"The banks have to protect people connecting to their services, but if I know enough about you or anyone, you would be amazed what I could do," said Andreas Baumhof, CTO of online fraud protection company TrustDefender.
"If you've lost your account number or password for online banking, is your bank providing you with a service to recover those details? Every bank does, because it's a normal thing that happens," he said.
"They provide you with this information after checking your identity, which typically is your address, telephone number and some personal information. So if you know this information they will release your password."
With the right story and the right personal information, the security measures of any bank can be circumvented
Baumhof said call centres are a typical target of online fraudsters and identity thieves. Their tactics involve bombarding a call centre with phone calls, talking to a different person each time and extracting a little piece of information with each call.
"After they've rung them fifty times, you can connect a lot of information about someone," he warned.
According to Baumhof a lot comes down to telling the right story to the right person.
"In the end it comes down to human behaviour, if you look like you are in the right place at the right time then people tend to trust you."
Baumhof said that with the right story and the right personal information, the security measures of any bank can be circumvented because of this human element.
"The banks can provide really good secure protection but it only helps if we protect people's identities generally."
Barclay's is reported to have accepted liability for the breach and has reimbursed the £10,000 into Agius' account.
Amid fears other senior execs could become targets, the bank is reported to have reissued all passwords and is revising its security practices.
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Refresh your AUP: Top tips to ensure your acceptable use policy is fit for purpose
Taking On Demand CRM Integration to the Next Level
The state of Middleware
Mimosa™ NearPoint™ for Microsoft® Exchange Server: Email Archiving 101
Data grids and service-oriented architecture
Delivering the Power of Choice with Microsoft Dynamics CRM
Achieving the impossible: Unlimited application scalability
Making the Business Case for IT Consolidation
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
Borderless corporate networks to shift focus to secure content management in Australia in 2009 2008-12-04 16:06:00+11
IDC Says Asia/Pacific Excluding Japan IT Market Will Remain The Bright Spot... 2008-12-04 15:04:00+11
MySpot SOS "Panic Button" Smartphone Application could save lone worker lives 2008-12-04 13:34:00+11
Charles Sturt University Commences Unified Communications Deployment With Interactive Intelligence 2008-12-04 08:30:00+11
AOC Launches 18.5” Widescreen Green 16:9 LCD Monitor in Australia and New Zealand 2008-12-03 15:30:00+11
Strategies for Eliminating .PST Files
Join industry expert Martin Tuip to discover best practice strategy for the archival and removal of .PST files using email archiving. Learn how to ensure long-term email records are there when needed, and reduce the risk to your business and clients.












