SecureWorks Reports New Russian Hack Attack

ATLANTA — The same Russian hackers who stole millions of bank, retail, payment service and Social Security account numbers in February are responsible for a new attack, according to SecureWorks.

That February attack raised eyebrows because it exploited what had been considered secure SSL/TLS encryption. This attack involves sending out spam with PDF attachments that turns the victims' PDF reader into a malware installer using a Gozi Trojan, SecureWorks researchers have discovered.

Recommended For You

"Once the PDF is clicked on, it then downloads the Gozi Trojan to the victim's PC and proceeds to capture any data entered into SSL-encoded Web sites, which includes most Internet banking, online retail and corporate intranets," says Elizabeth Clarke, SecureWorks spokeswoman.

"The attack is widespread, according to our spam sources," Clarke says.

Clarke says SecureWorks' clients are protected and that it has notified its research partners and other anti-virus vendors. For more information on the attack, go to http://www.secureworks.com/research/threats/gozi.

Security experts say attacks on PDF documents are a particularly worrisome new concern because many scans don't include those files, heretofore considered relatively immune.

Parsam Technologies Partners with ACI Worldwide

NEW YORK — ACI Worldwide will be integrating its online banking and enrollment platforms with the account opening, funding and transfer solutions of Parsam Technologies.

The uMonitor uOpen, uOpen and uTransfer solutions from Parsam Technologies will be combined with the ACI Enterprise Banker and Enterprise Enrollment solutions to enhance both online and branch channel sales, the companies say.

"This partnership creates unique opportunities for both companies to address the growing demands from financial institutions to expand online services and improve branch productivity," said Dinesh Sheth, CEO of Parsam Technologies in Memphis, Tenn.

New York-based ACI Worldwide provides banking, retail and cross-industry systems to more than 800 customers in 84 countries, the company says.

Twin Cities Firm Offers Webinar on Virtualization

MINNEAPOLIS — CFC Technology Corp. is inviting credit unions to check out the virtues of virtualization in an hour-long Webinar.

The company is a provider of VMware virtual infrastructure products and consulting services. VMware enables organizations to lower the number of servers they need, along with reducing storage and network resources.

"There is no longer the need to practice the old habit of buying a server for every community bank or credit union application, and a backup server for the application if it is designated to be part of a critical service," says Dan Sanderson, vice president of technology for CFC Technology in Minneapolis.

Credit unions can register for the Webinar at http://www.cfctechnology.com/webinars/virtual.html.

fi-linx Offers CheckChecker Free to CUs under $25 Million

SALEM, Ore. — A check fraud fighter developed at an Oregon credit union is being offered free of charge to credit unions under $25 million in assets.

The CheckChecker–which uses a mix of real-time data from the Federal Reserve and fraud alerts from industry groups such as the NCUA and FDIC–is a product of fi-linx, a technology company owned by MaPS Credit Union.

The hosted solution is intended to be an alternative to check imaging scanners, regional databases and per-item charges, and in its first month of use at $251 million MaPS CU, alerted a teller to stop payment on a $4,800 bad check that would have been a direct loss to the credit union.

fi-linx, formed by MaPS employees, offers the solution with a simple monthly fee structure based on asset size. For more information, contact Robbie Wright, general manager, at (503) 779-1352 or [email protected].

FISC Hires Director of Sales

LEWISTON, Maine — FISC Solutions has hired a new director of sales to manage the sales activities and staff of the provider of back-office solutions to credit unions, banks and other corporations.

John Peffer had been a national account executive at Pro-Tech Services in Waltham, Mass., selling services related to the secondary mortgage market. Prior to that he was a Bank of America account executive, selling lending programs.

FISC is a 30-year-old provider of item processing and electronic clearing, software, loan servicing, lockbox and disaster recovery services, as well as statement and invoice printing.

NCR, Ensenta Tout Launch of 'Self-Service Shared Branching'

DAYTON, Ohio — NCR Corp. is using a Web-based engine from Ensenta to power what the companies say is a first-of-a-kind opportunity for credit unions to engage in self-service shared branching.

The solution includes hardware, software and services to allow an enhanced set of on-us and shared branch transactions at a kiosk or ATM, including at other credit unions and at Vcom units in 7-Eleven stores, the companies say.

The program includes maintenance and consultancy services and the technology is built on NCR's easypoint 3800 Shared Branch Kiosk.

Ensenta of Redwood Shores, Calif., a specialist in self-service network solutions for credit unions, provides the terminal driving, switching and check-imaging processing functionality, while the CO-OP Shared Branching service extends the capability to more than 35 million credit union members nationwide, the companies say.

"With this program, self-service shared branching truly becomes a reality. Many shared branch credit unions are excited about offering these expanded services, which are now readily available and

conveniently offered through these unique self-service terminals," says Brian Pilla, NCR's director of

marketing and deployment for financial solutions in North America.

Open Solutions Deploys Entrust Grid Authenticator

GLASTONBURY, Conn. — Open Solutions says it has deployed the grid guard authenticator from Entrust IdentityGuard to more than 170,000 end users at more than 70 financial institutions.

The provider of core processing and other technology solutions says the deployment of the authentication platform from Dallas-based Entrust is part of its ongoing efforts to help its clients defend against online fraud attacks.

IdentityGuard's patented grid authentication offers protection based on an assortment of characters in a row/column format printed on a card.

"The Entrust IdentityGuard grid-based authentication solution affords financial institutions the ability to offer a low-cost option that has increased usability, high user acceptance and fast deployment," says Mike Nicastro, Open Solutions' senior vice president and chief marketing officer.

The IdentityGuard solution allows an organization to layer authentication methods–including physical authentication and mutual authentication–across different users and transaction types.

Additional Entrust IdentityGuard authentication options include one-time-password tokens, IP-geolocation, questions and answers, out-of-band, one-time pass codes and mutual authentication.

Vancouver CU Goes with LSI

VANCOUVER, Wash. — People's Community Federal Credit Union says it will be using Lending Solutions Inc. for loan-by-phone, Internet lending and member services.

The $120 million CU says it also will be using LSI's WebClose service, which connects members and LSI loan officers in real-time chat to discuss rate and payment options, payment protection coverage and closing information.

More than 300 credit unions, banks and mortgage lenders now use LSI's 7/24 call center in Elgin, Ill., and the online solutions, LSI says.

NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.