Here is a mock-up ad for a new real service that became available for cyber criminals recently:
"Hacked into Home Depot and exfiltrated tens of millions credit cards? Now you do not have to peddle the databases on the carder forums anymore. Best of all, no more hammering the merchant accounts with stolen cards before the account gets cut off. Life has become a lot easier with the new Voxis Platform.
"The Voxis Platform does all of that for you and targets up to 32 different payment gateways, including Coinbase and PayPal. You just load your card information into Voxis, and if data is missing about the creditcard holder, it will use "Pipl" people search engine API and Voxis will pull the data in.
"You can select several payment gateways at a time, and to get maximum leverage, click the checkbox "emulate human behavior" and use the predefined templates. Voxis also automates the amounts charged per credit card so that you will stay under the fraud radar."
The problem is that this service is real. It's a few months old, seems to work, created by the criminal Voxis Team which specializes in money laundering by using their own specially designed payment gateway software which can send batches of stolen card charges to multiple gateway processors, automating their returns before acquiring banks can catch the merchant fraud.
What You Can Do About It
Strengthen know-your-customer (KYC) due diligence procedures for online-processors, payment gateways and e-commerce companies in regard to newly issued merchants accounts and transaction scrubbing thresholds.
This was reported by IntelCrawler, a cyber threat intelligence firm from Los Angeles, running Big Data on cyber crime and connecting the dots. Go to their homepage and read the "Did you know?" feed for a minute. Your hair will stand on end: https://www.intelcrawler.com/
Here is a map with known Point-of-Sale infections - real time! You can check if your IPs are maybe in there: https://www.intelcrawler.com/analytics/pmim
