headlines - mk.com.vn · business continuity locally and globally. on the other hand, mk group and...

12
MK World of Cards ©2020 MK Group Certificates & Industry membership [email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513 Internal e-Newsletter of MK Group - Issue #53 | April, 2020 MK Group offers Anti-Covid-19 insurance for employees Hanoi promotes cashless payment, e-commerce Google preps debit card - TechCrunch Terminal fraud attacks increasing in Europe Qatar National Bank awarded for use of iris Cybercriminals are using COVID-19 to commit fraud Here’s how to recognize them Headlines Editor-in-chef: Ms. Phan Thi Quynh Hoa MD of MK Group Note: All information and images in this internal magazine were collected and edited from various reputed sources by MK Group and used for knowledge-sharing purposes only. | Email: [email protected]

Upload: others

Post on 24-Jul-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

Internal e-Newsletter of MK Group

- Issue #53 | April, 2020

❖ MK Group offers Anti-Covid-19

insurance for employees

❖ Hanoi promotes cashless

payment, e-commerce

❖ Google preps debit card -

TechCrunch

❖ Terminal fraud attacks

increasing in Europe

❖ Qatar National Bank awarded for

use of iris

❖ Cybercriminals are using

COVID-19 to commit fraud –

Here’s how to recognize them

Headlines

Editor-in-chef: Ms. Phan Thi Quynh Hoa – MD of MK Group

Note: All information and images in this internal magazine were collected and edited from various reputed sources by MK Group and u sed for knowledge-sharing purposes only.

| Email: [email protected]

Page 2: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

At the moment, MK Group’s main purpose is to

proactively protect the health of employees and

ensure high-quality product, solution and

service . As a result, we offer Anti-Covid-19 to

all employees.

As soon as COVID-19 pandemic started to spead

over Vietnam, MK Group and its members

immediately implemented responses in accordance

with recommendations of Ministry of Health and

other authorities, such as delivering neccesary

hygience instrument (mask, hand sanitizer) ,

conduct daily communication to raise individual’s

health protection mindset. In addition, MK Group

regularly exchange information with global partners

to develop pandemic response plan to ensure

business continuity locally and globally.

On the other hand, MK Group and its members

correspondingly solution in order to empower

customers and partners to overcome this crisis,

particularly the establishment of“ Preventive

program for Card Issuance & Personalization” for

finance & banking sector with objective to prevent

interruption in their card issuance operation.

MK Group offers Anti-Covid-19 insurance for employees

At the moment, during the amidst pandemic, besides ensurance of business continuity, MK Group always focus on creating emotionally and physically safe

workplace. MK Groups desires to provide most favourable conditions to protect its employees as well as to involve with the community in triumph over the

pandemic by offering Anti-COVID insurance for all employees./.

Page 3: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

COVID-19 UPDATE: MK Group continuously strives for prevention of global pandemic

Dear Valued customers and partners,

There are no words to show our appriciation for your trust and confidence in MK Group

during the past time. Especially in this unprecedented period, your trust has become

even more important and meaningful to all of members of MK ‘s family.

A variety of methods against the social and economic effect of COVID-19 pandemic

are being seriously and consistenly applied and implemented in our facilities:

• Protection to the health of employees: This is our primary priority following the

best practices of WHO, Vietnam Ministry of Health and other governmental

agencies.

• Ensure the continuity of production and business: Raw material and printing

supply storage, rotation of working schedule, workplace sanitation etc. which

are accordance to Government’s direction have been applied in our factories

and premises.

• Service: Delivery & customer service are still fully functional.

• Infrastructure: Maintain our hosted data centers and communication lines in

good condition, backed up by multiple redundancies to ensure that our remote

communication channels are always available.

• Accompany with customers – Joining hands with Community: Developing and

implementing “Preventive Program for Card Issuance & Card Personalization”

for finance & banking customers; card promotion for center of health care,

hospitals etc. with the desire of supporting our customers and partners

overcome this difficult time.

Furthermore, we have established a new column – “COVID-19 Response” on our

website in order to keep you informed on any changes in our operation and production.

We wish our efforts and determination will contribute to Vietnam and world to halt

COVID-19 as well as deliver our outstanding products, services and solution to

customers and partners.

Faithfully yours,

MK Group

Hand sanitizing station in MK Smart’s Factory in Quang Minh IZ

Temperature check at factories of MK Smart in Hanoi & Ho Chi Minh City

Distance working arrangements at MK’s facroties in Hanoi & Ho Chi Minh City

Page 4: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

Entrust Datacard, a leading provider of trusted identity and secure transaction technology solutions, today

announced the Entrust Datacard Certificate Hub, a portal that allows customers to find, control and automate their

public and private certificate deployments via a single pane of glass.

The use of digital certificates has become significantly more complex. Traditional PKI use cases like user

authentication and VPN security now coexist with use cases like the Internet of Things (IoT), software

containerization and DevOps systems. This has increased the number of digital certificates overall, and created

demand for short-lived certificates and massively distributed infrastructures. As digital certificates proliferate,

enterprises must deliver on the promise of automation to leverage modern cloud and application development

methods.

"Security-minded enterprises have a critical need to track their certificates and know when they're going to expire.

Many enterprises struggle to track their certificates and proactively manage them -- their environments have grown

too complex and distributed to manage hundreds or thousands of certificates on spreadsheets, which opens

weaknesses that attackers prey upon," said Robyn Westerveldt, Research Director, Security & Trust at IDC. "A

certificate lifecycle management tool like Certificate Hub helps enterprises deal with complexity by standardizing,

simplifying and streamlining certificate discovery, management and automation."

Organizations using Entrust Datacard Certificate Hub gain visibility and management across their Entrust Datacard

private and publicly trusted Certificate Authorities (CAs), as well as Microsoft CAs. The platform provides an easy-

to-use and intuitive interface that acts as an enforcement point to centrally manage policy and certificate lifecycle

management activities including network discovery, certificate issuance and fully automated reporting.

Certificate Hub is fully compatible with existing PKI integrations, so it complements rather than disrupts an

organization's current environment. The application deploys on premise using modern orchestration technology and

uses modular pluggable components for expansion and future growth. Certificate Hub supports Entrust Authority

Security Manager (both on-premise and Entrust-managed), Entrust Certificate Services (SSL/TLS), and Microsoft

CAs.

(Entrust Datacard)

Entrust Datacard Launches Certificate Hub for Enterprise-

wide Certificate Visibility & Lifecycle Management

Page 5: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

Trong năm 2016, các nhà sản xuất thẻ đã sản xuất 6,43 tỷ thẻ thanh toán trên toàn cầu, tăng

3,6% so với năm 2015. Thẻ thanh toán được thống kê bao gồm thẻ trả trước, thẻ tín dụng và

thẻ ghi nợ của MasterCard, Visa, UnionPay và thẻ ATM nội địa; thẻ American Express, Diners

Club, Discover, JCB, RuPay, Maestro; thẻ thanh toán bán lẻ, xăng dầu, y tế, hàng không, đỗ

xe và các loại thẻ thanh toán khác. Sự tăng lên trong sản lượng thẻ EMV đã dẫn đến việc

giảm số lượng thẻ từ được phát hành thời gian.

Trong lĩnh vực Thẻ thanh toán, 8 vị trí dẫn đầu danh sách vẫn không thay đổi so với năm

2015. Tổng số lượng thẻ của 8 “đại gia” này đạt 3,7 tỷ thẻ thanh toán, giảm 9,1% so với năm

2015.

Một trong những điểm nhấn ấn tượng của bản báo cáo lần này chính là MK Smart – thành

viên của MK Group đã được “xướng tên” là một trong những công ty có sự tăng trưởng ấn

tượng trong lượng thẻ sản xuất trong năm 2016 (tăng 58,2 triệu thẻ), tiếp theo đó là Toppan

Printing (tăng 27,5 triệu thẻ), Rosan Finance (tăng 11,7 triệu thẻ).

Theo xếp hạng của Nilson, MK Smart đứng trong TOP 15 về tổng sản lượng thẻ thanh toán

trong năm 2016 với 59 triệu thẻ, vượt qua DZ Card Thái Lan, trở thành nhà sản xuất thẻ lớn

nhất khu vực Đông Nam Á. Ngoài ra, khi xét riêng về thẻ thanh toán thương hiệu Visa và

MasterCard, MK Smart vươn lên vị trí thứ 8 trên bảng xếp hạng. Trong năm 2016, tổng sản

lượng thẻ sản xuất của MK Smart là 167 triệu thẻ với hơn 60% sản lượng được xuất khẩu

sang Nhật Bản và nhiều nước Châu Á, Châu Mỹ La tinh.

Sau 14 năm phát triển, MK Smart đã vươn lên trở thành một trong những cái tên tuổi lớn

trong ngành công nghiệp Thẻ, sánh với những nhà sản xuất thẻ lâu năm tại các quốc gia phát

triển như Gemalto, Oberthur, Giesecke & Devrient, đưa vị thế của Việt Nam trở nên đậm nét

hơn trong bản đồ các quốc gia sản xuất thẻ lớn trên thế giới.

MK Smart được thành lập năm 2003, là thành viên của Tập đoàn MK. Hiện nay MK Smart là

công ty hàng đầu Đông Nam Á trong lĩnh vực sản xuất thẻ thông minh phục vụ ngành viễn

thông (thẻ SIM), tài chính ngân hàng (thẻ từ và thẻ chip), các cơ quan, tổ chức và doanh

nghiệp. MK Smart là công ty Việt Nam duy nhất sở hữu công nghệ và kinh nghiệm về thẻ

chip, sản xuất thẻ SAM, công nghệ mã hóa và bảo mật.

MK Smart sở hữu 2 nhà máy sản xuất thẻ thông minh đặt tại KCN Quang Minh Hà Nội và

Khu Công nghệ cao Tp. HCM với quy mô lớn và hiện đại bậc nhất Việt Nam cũng như trong

khu vực. Với các chứng chỉ sản xuất thẻ tài chính Visa, MasterCard, JCB, Union Pay, MK

Smart được sản xuất thẻ cho các ngân hàng trong nước cũng như trong khu vực Châu Á-

TBD với chất lượng cao, giá cả hợp lý và thời gian giao hàng nhanh nhất.

The capital city will also encourage the application of e-commerce in business and start-ups, with a focus on

improving the logistics system to boost e-commerce development.

The city wants 75 per cent of internet users to shop online by the end of this year, up 7 per cent against 2019. It

would also want all safe food chains joining the payment system using QR Code for origin traceability.

Online services in transportation such as booking, ticket purchase and ride-hailing as well as online education,

health care and communications activity would also be promoted.

The platform for safe agricultural products in Hanoi at www.chonhaminh.gov.vn will continue to be updated.

The city asked the municipal Department of Industry and Trade to work with the Trade Promotion Agency and

Amazon Global Selling to provide instruction to small firms to do business on the Amazon.com platform.

According to the Vietnam E-commerce Association, Hanoi ranks second after HCM City in the e-commerce

business index with a score of 84.3. The capital city hopes to maintain the position this year.

(Intellasia)

CENTRAL CARD ISSUANCE SYSTEM

• Specially designed for mid- & high-range

personalization;

• Comprehensive features: smart card/

magnetic stripe encoding, embossing, indent

printing, laser engraving, etc.

• Modular system with flexible choices to meet

specific requirements of each card program;

• Comprehensive warranty – maintenance

service.

Hanoi promotes cashless payment, e-commerce

Hanoi plans to promote cashless

payments as part of efforts to develop e-

commerce in the capital.

Under a plan recently issued by the municipal

People’s Committee, the capital city targets

that 90 per cent of modern retailers and water,

electricity and telecommunications services

providers together with 25 per cent of petrol

stations would accept cashless payments by

the end of this year.

The move aims to strengthen online shopping

to gradually change consumers’ shopping

habit from traditional to modern channels.

Page 6: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

If and when it does, the card would let users make in-person, in-app and online purchases and strengthen Google

Pay, helping the digital wallet in its fight with rivals from Apple, Samsung and Facebook.

The November WSJ report suggests that Google is less interested in creating a banking brand than in obtaining

the valuable financial data - on things like income and bills - associated with the accounts.

The Google plan is also significantly different to Apple's effort, which is a credit card, launched in partnership with

Goldman Sachs last August.

In a statement to TechCrunch, Google says: "We’re exploring how we can partner with banks and credit unions

in the US to offer smart checking accounts through Google Pay, helping their customers benefit from useful

insights and budgeting tools, while keeping their money in an FDIC or NCUA-insured account. Our lead partners

today are Citi and Stanford Federal Credit Union, and we look forward to sharing more details in the coming

months."

(Finextra)

Google preps debit card - TechCrunch

Google could soon follow Apple in launching

its own branded payments card, according to

TechCrunch. The tech giant is developing

physical and virtual debit cards that would be

co-branded with financial services players,

including Citi and Stanford Federal Credit

Union.

These two firms were floated in a November Wall

Street Journal report on a possible Google

checking account, code-named Cache. Cache was

initially expected to launch early this year but has

yet to materialise and it is also unclear when the

debit card could make its way into the wild.

Page 7: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

Terminal fraud attacks were up 35% in 2019, according to the European Association for Secure Transactions. It

released the European Payment Terminal Crime Report Tuesday, which found that terminal-related fraud attacks

rose from 13,511 to 18,217 incidents, mainly driven by an 87% increase in ATM transaction reversal fraud attacks

(up from 4,843 to 9,054 incidents), while card-skimming incidents fell 21% to an all-time low (down from 1,883 to

1,496 incidents) according to a press release.

ATM-related physical attacks were up 0.5% (from 4,579 to 4,571 incidents). Attacks due to ram raids and ATM

burglary were down 11% (from 1,256 to 1,122 incidents) and ATM explosive attacks (including explosive gas and

solid explosive attacks) were down 7% (from 1,052 to 977 incidents). Losses due to ATM related physical attacks

were (22 million euros) 39% decrease (36 million euros) reported in 2018.

The average cash loss for a robbery was estimated at 20,369 euros per incident, and the average cash loss per

explosive or gas attack was 10,735 euros and the average cash loss for a ram raid or burglary attack was 9,377

euros. These figures did not take into account collateral damage to equipment or buildings, which can be significant

and often exceeds the value of the cash lost in successful attacks.

A total of 140 ATM malware and logical attacks were reported, down from 157 in 2018, an 11% decrease. All the

reported attacks were "cash-out" or "jackpotting" attacks. In 118 attacks, equipment typically referred to as a "black

box" was used, and malware was used in the other 22 attacks. Related losses were up 142%, (0.45 million euros to

1.09 million euros).

"Despite the overall rise in terminal fraud incidents, total reported losses were almost unchanged. Transaction

reversal fraud losses did rise (from 2.6 million euros to 5.2 million euros), but the continued drop in skimming incidents

has helped to keep the overall loss position stable," said Lachlan Gunn, EAST executive director in the release. Total

losses of 249 million euros were reported, up 1% (from the 247 million euros reported in 2018). Overall losses due

to card skimming were unchanged and losses due to card trapping were down by 14% (from 2.9 million euros to 2.5

million euros).

(ATMmarketplace)

Terminal fraud attacks increasing in Europe

Page 8: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

Ủy ban Quốc phòng và Nội vụ (PDIAC) thuộc Nghị viện Uganda đã yêu cầu Chính phù nước này đầu tư lớn để triển khai

chương trình phát hành hộ chiếu điện tử (ePassport). Theo PDIAC, Uganda sẽ cần phải đầu tư ít nhất 28 tỷ Shilling (khoảng

7,8 triệu USD) để thiết lập cơ sở hạ tầng ban đầu phục vụ hoạt động sản xuất hộ chiếu điện tử. Kinh phí cho toàn bộ dự án

sẽ vào khoảng 100 triệu USD. Dự án phát hành hộ chiếu điện tử, do Cơ quan Quản lý Công dân và Nhập cư Quốc gia của

nước này phụ trách, theo kế hoạch đã phải được triển khai từ tháng 1/2017, tuy nhiên dự án đã không thể thực hiện được

vì lý do thiếu vốn./.

(Security Document World)

Singapore thử nghiệm đăng ký cử tri điện tử bằng thẻ căn cước điện tử Singapore sẽ thử nghiệm hệ thống đăng ký bỏ phiếu mới được liên kết với thẻ căn cước thông minh. Cơ quan Bầu cử

Singapore (ELD) cho biết để đáp ứng yêu cầu của các phương tiện truyền thông, ELD sẽ thử nghiệm hệ thống quét mã vạch

ngay trên thẻ nhận dạng đăng ký quốc gia (NRIC) của các cử tri. ELD khẳng định hệ thống mới sẽ rút ngắn thời gian chờ

đợi cho các cử tri và giảm số lượng nhân viên phục vụ hoạt động đăng ký tại các điểm bầu cử. Theo ELD, cơ quan này dự

định thí điểm công nghệ đăng ký điện tử tại một cuộc bầu cử trong tương lai nhằm kiểm tra thủ tục và thu thập thông tin phản

hồi. ELD hiện vẫn chưa gọi thầu cho dự án thí điểm./.

(Security Document World)

Australia thử nghiệm công nghệ nhận dạng khuôn mặt tại

Đại hội Thể thao Khối Thịnh vượng chung Công nghệ nhận dạng khuôn mặt sẽ được sử dụng trong mạng lưới giao thông công cộng trong thời gian tổ chức Đại hội

Thể thao Khối Thịnh vượng chung 2018 (2018 Commonwealth Games) tại thành phố Gold Coast, bang Queensland, Australia

nhằm ngăn chặn nguy cơ khủng bố tại những khu vực công cộng và địa điểm thi đấu. Hệ thống nhận dạng tinh vi sẽ xác

định khuôn mặt của những kẻ tình nghi trong đám đông trên tàu, xe điện và xe buýt trong suốt 11 ngày diễn ra sự kiện. Hệ

thống này sẽ được kết nối với lực lượng phản ứng nhanh gồm cảnh sát và quân đội nhằm bảo vệ an toàn cho 1,5 triệu khán

giả tham dự sự kiện. 2018 Commonwealth Games sẽ được tổ chức tại thành phố Gold Coast, bang Queensland, Australia

từ ngày 4/4 đến ngày 15/4/2018. Cơ quan Cảnh sát Liên bang Australia chủ động đưa ra sáng kiến này bởi họ tin rằng Gold

Coast sẽ là thành phố hết sức phù hợp để thử nghiệm công nghệ do có được một hệ thống camera giám sát an ninh (CCTV)

chất lượng cao./.

(Planet Biometrics)

Mỹ: CBP kiểm soát xuất cảnh bằng công nghệ sinh trắc tại các sân bay Phó Cục trưởng Cục Hải quan và Biên phòng Mỹ (CBP), John Wagner cho biết cơ quan này sẽ triển khai chương trình kiểm

soát xuất cảnh sinh trắc bắt buộc, giúp xác định danh tính du khách nước ngoài khởi hành tại các sân bay trên lãnh thổ của

nước này. Thông báo trên được đưa ra vài tuần sau khi Bộ An ninh Nội địa Mỹ đưa ra báo cáo ước tính khoảng 629.000 du

khách tới nước này đã lưu lại quá hạn trong năm 2016 do thiếu một hệ thống kiểm soát xuất cảnh sinh trắc đồng bộ tại các

sân bay. CBP sẽ kết hợp hệ thốngnay vớiạng để hoàn thành các mục tiêu đề ra. Tuy nhiên, Phó Cục trưởng CBP thừa nhận

sẽ phát sinh một số vấn đề liên quan đến quyền riêng tư của cá nhân, đặc biệt khi sáng kiến nói trên cũng đề cập tới khả

năng áp dụng công nghệ nhận dạng khuôn mặt để chụp lại hình ảnh của các công dân Mỹ.

(Biometric Update)

Embily, a crypto company, has released a prepaid card that gives customers the ability to use the card

anywhere that Mastercard is accepted.

Card users can withdraw up to $2500 daily from an ATM, and all funds are fully insured, according to an

article in Cointelegraph.com

What makes the card even more appealing is the ability to fully customize the design to reflect their

personality or make a statement. The card is available worldwide and can be topped with three types of

cryptocurrencies: Bitcoin, Ether and Tether, with more community coins expected to be added in the future.

The card can be loaded with up to $13,000 in a single transaction and the maximum balance is limitless.

Embily's card can be accessed in real time and users can easily get a transaction history to view how funds

were spent. The company has also developed two apps, one iOS and one Android, to be used with the card

which will be available soon from the App store and Google Play.

(ATMmarketplace)

Crypto prepaid card lets users withdraw $2500 daily

Page 9: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

Qatar National Bank awarded for use of iris

Qatar National Bank has been recognised for having the “Best Biometrics Initiative, Application or Program in

Qatar” for its use of iris recognition systems from Iris ID in some QNB branch ATMs. The bank is the largest

financial institution in the Middle East and Africa, with branches, subsidiaries and associate companies in 31

countries on three continents.

The deployment of QNB’s Biometric Eyes (IRIS) Scan ATM program, a first of its type in Qatar, is part of the

bank’s commitment to innovative solutions to deliver premium services to customers in a safe, fast and

convenient way. Mohammed Murad, vice president, global sales and business development, Iris ID,

congratulated QNB on the award from Asian Banker.

“QNB should be applauded for staking out a futuristic, leadership position when it comes to improving the

security, convenience and safety of its customers as they access their accounts via bank ATMs” he said. “The

ease and speed of our contactless iris-based recognition system makes it ideal for use in the financial industry.

Our contactless systems have taken on added importance with the worldwide spread of the COVID-19 virus.”

The bank launched its use of the Iris ID biometric solution in ATMs in late 2016. The system enables QNB

customers to access their accounts at ATMs without the need of a bank card or PIN.

To use the Iris ID solution, the bank’s customers participate in a one-time registration at a QNB branch office.

The two-minute process involves taking a digital photo of the iris, which is converted into a small template

stored in a secure database. At the ATM, customers need only a second to look into a built-in reader and have

their iris pattern confirmed.

(Planetbiometrics)

Page 10: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

Cybercriminals Are Using COVID-19 to Commit Fraud—

Here’s How to Recognize Them

There’s no denying that the world is in unprecedented times. As the novel coronavirus and the

disease it causes — COVID-19 — continue to spread both globally and domestically, virtually no

one in the world remains untouched by the effects. While frightened consumers are desperate to

find ways to stay healthy and protect their livelihoods, cybercriminals are finding ways to profit from

this fear.

Some consumers are purchasing equipment advertised as able to cure or prevent coronavirus

infection. Others, with good intentions, are donating money to what they believe are legitimate

charities, but are in fact scams created by fraudsters. Payments companies are also vulnerable,

as many companies have been forced to move operations fully online to comply with government

mandated social distancing orders.

Understanding that these bad actors will continue to exploit the ongoing pandemic, LegitScript has

made tracking and stopping these cybercriminals its top priority. It recently released a

comprehensive 23-page guide that describes prevalent forms of cybercrime related to the

pandemic and identifies red flags to keep in mind.

Common Types of Illicit Activity Related to COVID-19

There are five major types of illicit activity related to coronavirus: high-risk domain name

registrations, problematic diagnostics and supplies, bogus cures and treatments, rogue internet

pharmacies, and scams. Note that LegitScript’s guide goes much more in-depth in providing

descriptions, examples, and ways to identify each type of fraudulent activity:

1. High-risk domain name registrations

Scammers have rushed to register domain names that allow them to defraud consumers and sell

questionable products and services. These domain names often include the words coronavirus,

pandemic, or covid19, and are 50% more likely to have malicious or suspicious content than other

domain names registered in the same period.

Among a list of 60 recently registered domain names, ones that pose an

elevated risk include “isurvivedcoranvirus,” “pandemicvaccine,”

“covid19cure,” and “covid19responsefund.”

2. Problematic diagnostics and supplies

Another troubling trend is the marketing of coronavirus-related

diagnostics and supplies that come with a greater risk to consumers,

payment service providers, and e-commerce platforms. Largely

prompted by a shortage of medical supplies and testing in the United

States, fraudsters have begun selling “potentially unapproved,

ineffective, or counterfeit” items online to vulnerable consumers.

For example, there are a number of self-proclaimed “COVID-19 self-

testing kits” available for purchase online. As of now, most legitimate

COVID-19 diagnostic testing in the United States is being conducted in

verified state and public health laboratories. Although self-testing kits

are slowly coming to market, any currently marketed online should

warrant scrutiny.

Page 11: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

5. Scams

Beyond the sale of problematic products, scams related to the COVID-19 outbreak

have also sprouted as ways to separate consumers from their money. This includes

non-delivery scams, in which a product is paid for by a consumer but never delivered.

This type of scam has a high risk of chargeback disputes and can be costly for payment

processors as a result.

There are also donation scams, wherein scammers take advantage of people who

want to help those in need. The scammers may pretend to be in need of assistance,

or pose as representatives of an organization offering COVID-19 relief. Additionally,

merchants may falsely claim a portion of their proceeds will go to a charity helping

those affected by the epidemic.

Stopping COVID-19 Fraudsters Is About More Than Saving Money: It’s About

Saving Lives

Recognizing and preventing these insidious forms of fraud is about more than

protecting clients and stopping cybercriminals: it’s about saving lives. As stated in the

report, “the illicit activity related to COVID-19 is further exacerbating the pandemic.”

Consumers purchasing ineffective equipment or falsely believing they are immune or

cured can further spread a disease that has already killed tens of thousands of people

globally.

(paymentsjournal)

Some fraudsters are engaged in price gouging as they heavily mark up the cost

of unproven testing kits and basic healthcare supplies (e.g., hand sanitizer, face

masks, and toilet paper.) This forces consumers to spend hundreds or even

thousands of extra dollars for essential items amid the global COVID-19

pandemic and other disasters. Price gouging is considered a criminal offense in

most states.

3. Bogus cures and treatments

Consumers are understandably anxious for a cure or treatment that will keep

themselves and their families safe. Scammers have preyed on these consumers

by offering unapproved treatments, fake cures, and additional products and

services claiming to prevent coronavirus infection.

One such example is a scam offering coronavirus vaccines supposedly from the

World Health Organization for free—minus the cost of shipping, of course. Other

scams include products such as teas, essential oils, colloidal silver, and even an

“air-purifying necklace” that are falsely advertised as effective treatments or

preventative measures for COVID-19.

4. Rogue internet pharmacies

Some internet pharmacy networks blatantly disregard the law by offering

unapproved drugs, approving prescription drugs without a valid prescription, or

selling drugs in jurisdictions where they don’t have licensing. Many of these rogue

pharmacy networks have homed in on the pandemic as an opportunity, and are

now advertising unproven antiviral, antimalarial, and antibiotic treatments for

COVID-19.

Many of these prominent rogue internet pharmacies are offering an anitviral drug

called chloroquine. The pharmaceutical version of chloroquine phosphate is used

to prevent and treat malaria, but can be dangerous if used improperly or without

medical approval.

Page 12: Headlines - mk.com.vn · business continuity locally and globally. On the other hand, MK Group and its members correspondingly solution in order to empower customers and partners

MK World of Cards ©2020 MK Group

Certificates & Industry membership

[email protected] www.facebook.com/mkgroup1999 (84-24) 6266 2703 - 513

Copyright© 2020 by MK Group

www.mkgroup.com.vn | [email protected] | www.facebook.com.vn/mkgroup1999

Hanoi:

F11th, TTC Tower, 19 Duy Tan St., Cau Giay Dist. | Tel: (+84-24) 6266 2703

Ho Chi Minh City:

F7th, Thien Son Building, 5 Nguyen Gia Thieu St., District 3 | Tel: (+84-28) 3930 5023

Brian Honan, Chủ tịch BH Consulting, Dublin, Cộng hòa Ireland, cho biết trong 8 năm qua, ông đã liên tục đưa ra những

lời kêu gọi khắc phục 5 trường hợp bảo mật yếu kém điển hình lại Hội nghị Tội phạm mạng. Cụ thể là:

Mật khẩu yếu

Thiếu bản vá lỗ hổng

Phần mềm diệt virus lỗi thời

Thiếu sự giám sát

Sử dụng những hệ thống dễ bị tổn thương, chẳng hạn như ColdFusion, Windows XP, WordPress lạc hậu và những hệ

thống tương tự khác. Brian Honan dự báo 5 “căn bệnh mãn tính” nói trên sẽ vẫn tiếp tục hành hạ thế giới bởi vẫn còn

rất nhiều tổ chức tiếp tục sử dụng công nghệ lạc hậu.

3. Thêm nhiều nỗi lo về bảo mật điểm cuối

Một trong vụ việc nghiêm trọng nhất trong năm 2017 là sự bùng phát dữ dội của mã độc tống tiền WannaCry. Theo

Avivah Litan - Phó Chủ tịch và là nhà phân tích cấp cao của Gartner, WannaCry có thể đã bị chặn đứng nếu mọi người

được cung cấp bản vá lỗi. Tuy vậy các tổ chức vẫn phải đối mặt với thách thức từ công tác quản lý bản vá.

“An ninh điểm cuối khác với quản lý công nghệ thông tin. Điều đó có nghĩa là chúng ta luôn dễ dàng triển khai các hệ

thống nhưng sẽ gặp rất nhiều khó khăn khi chuyển đổi hệ thống sang trạng thái ngoại tuyến để tiến hành hoạt động

bảo trì hoặc dành ưu tiên cho những lỗ hổng cần phải vá lại. Và kết quả là có hàng loạt hệ thống tồn tại những điểm

yếu điển hình. Không bất ngờ khi 80% đến 90% mã độc tống tiền đã lợi dụng những lỗi chung này”, Avivah Litan cho

biết.

Để khắc phục tình trạng nói trên, theo Avivah Litan, tất cả các tổ chức cần phải sử dụng phần mềm diệt virus “mới nhất

và tốt nhất” bởi vì các thế hệ mới sẽ có khả năng phát hiện và phản ứng tốt hơn, đặt biệt là những sản phẩm dựa trên

công nghệ điện toán đám mây.