What are the major threats to e-payments?

Today e-payment has gain more popularity than previous years ,which makes the life much more easier

But there are many threats that it generally suffers,Hackers always find new methods to steal money by using their sharp brains.

But what are those threats ?what are the various methods they use ?what are various strategies ?


REQUEST:- please don't share any tricks or other stuff here ,

Like 0 Replies 5

Replies

Welcome, guest

Join CrazyEngineers to reply, ask questions, and participate in conversations.

Sign up Log in

CrazyEngineers powered by Jatra Community Platform

  • Ashraf HZ
    Ashraf HZ

    @Ash • Jun 20, 2010

    I believe a major threat is via phishing. An authentic looking email requesting login credentials to the payment gateway will steal your info using a fake website. Though obviously online financial systems never would send an email requesting your details, one might still be fooled by this if not careful.

    Another threat related to phishing is with DNS cache poisoning. When you type in the website of your payment gateway, you might be redirected to a rogue IP address hosting a phishing website due to an "infected" DNS server. Though very rare, it can happen with the most determined of criminals. This is quite a scary scenario 😔

    At least with the advent of authorization codes (such as via mobile phones), the consequences of getting your account compromise can be minimized. But websites like Paypal don't have this... knowing just the Paypal credentials is enough to purchase whatever you want up to the card limit. That is why its better to link your Paypal account with a fund limited debit card rather than a credit card.

    0
  • vik001ind
    vik001ind

    @vik001ind-rOaCSy • Jun 20, 2010

    Hackers are now done with the customers, they are now directly attacking the bank sites & stealing credentials of many hundreds of customers. They use social engineering technique & they gather information by their hacker's network about what type of security systems, softwares & hardwares are installed in the bank & vulnerabilities of the system. Then the hack the bank systems or design the cracking tools or buy it from some other elite hacker. And rest is history.

    0
  • jhbalaji
    jhbalaji

    @jhbalaji-AH60JJ • Jun 20, 2010

    The major problem is forgery and paying the item with less then its marked value!
    If its a digital item then MySQL Injection may be Possible by a Dev! 😀

    0
  • Manish Goyal
    Manish Goyal

    @manish-r2Hoep • Jun 20, 2010

    jhbalajiThe major problem is forgery and paying the item with less then its marked value!
    If its a digital item then MySQL Injection may be Possible by a Dev! 😀

    Can you please elaborate this a little bit more?

    0
  • jhbalaji
    jhbalaji

    @jhbalaji-AH60JJ • Jun 20, 2010

    goyal420Can you please elaborate this a little bit more?

    SQL injection refers to the act of someone inserting a MySQL statement to be run on your database without your knowledge. Injection usually occurs when you ask a user for input, like their name, and instead of a name they give you a MySQL statement that you will unknowingly run on your database.
    Likewise in downloaded products when weak spot is found then it can be easily broken 😀

    0