Tuesday, April 28, 2009

CommSec Breached by Hackers

Source: News
Complete item: http://www.news.com.au/technology/story/0,28348,25396936-5014239,00.html

Description:
SECURITY at the nation's (Australia) biggest online trader has been exposed as wide open to attack by computer hackers.

Security flaws at CommSec potentially endangered accounts containing billions of dollars of mum-and-dad investors' money.

After a Herald Sun investigation, CommSec's 1.7 million customers have been strongly urged to change their passwords. Editor's Note: Passe' Words

Had any hackers entered the system they would have been able to access the personal details of CommSec's customer accounts and trade in other people's share portfolios.

E-Secure-IT
https://www.e-secure-it.com

HomeATM at FinovateStartup09 Today

After a fantastic week in Las Vegas at the ETA Show, we are scheduled to participate in FinovateStartup09 tomorrow. I depart Phoenix for San Francisco this morning to meet up with HomeATM CEO Ken Mages and COO, Mitch Cobrin who flew directly there from Las Vegas.

It looks to be an exciting time and we look forward to meeting with several other providers of financial innovations whom were also invited to participate. For more information on FinovateStartup09, click the following link: www.finovate.com I've included a copy of our press release (below) announcing our participation which also provides more details about the event.

HomeATM to Participate in FinovateStartup09

HomeATM has been invited to to discuss the merits of their innovative Internet PIN Debit Solution at FinovateStartup09, to be held in San Francisco on April 28th.

FOR IMMEDIATE RELEASE

PRLog (Press Release) – Apr 10, 2009 – Chicago: HomeATM is pleased to announce that it will be participating at the FinovateStartup09 Conference, April 28, in San Francisco, California. HomeATM CEO Ken Mages and COO Mitch Cobrin will be discussing the company's patented and PCI 2.0 Certifed Online PIN Debit Solution.

HomeATM engineered and now manufactures the World's First and Only PIN Entry Device designed specifically for eCommerce use. The Payment Card Industry, which consists of representatives from Visa, MasterCard, American Express, Discover and JCB International, approved the device last month in a milestone event toward PIN Debit on the web becoming ubiquitous. A majority of industry experts agree that a hardware approach towards PIN Debit for the web is the only way to secure and protect valuable cardholder data from fraudsters.

"We are pleased to be able to demonstrate why a hardware approach to protecting cardholder data in a web based transaction is far more secure than any other approach imaginable," said John B. Frank, HomeATM Executive Advisor. "Swiping one's card is not only exponentially more secure than typing in one's 14-16 digit Personal Account Number, but one could argue that it's also 14-16 times more convenient."

The HomeATM PIN device plugs into any USB port in milliseconds and is Plug and Play...there is no software or drivers that need to be installed.

"When a consumer swipes their card using HomeATM's SafeTPIN, it results in a "Card Present" transaction, which is not only a more secure way to process bank cards, but provides the merchant with significantly lower Interchange fees," Frank explained. "By incorporating a PIN Pad into their device, merchants enjoy a dually authenticated transaction, which provides them with "true" PIN Debit Interchange as well."

"The value we can provide internet merchants is enhanced with our recent PCI 2.0 Certification," continued Frank. "We can effectively remove the Internet Retailer from the scope of PCI DSS providing "instant compliance," which could potentially save them hundreds of thousands in costs associated with the compliance process"

HomeATM's PCI 2.0 Certified SafeTPIN was also designed to be used as an authentication device, replacing easily hacked Username/Password: protocols curiously employed by financial institutions for online banking. Swiping one's bank card and entering their PIN outside the browser space provides military grade encryption as it uses Triple DES and DUKPT key management protocols.

With the recent rash of breaches, it is important to provide consumers and merchants with the most secure payment and authentication mechanisms available. In the brick and mortar world, that mechanism is PIN Debit. HomeATM is poised to bring it to the other world...the world wide web.

FinovateStartup is a spin-off of the New York City-based Finovate conference, the first demo-focused conference in financial technology. It is organized by Online Financial Innovations, a boutique banking technology research firm based in Seattle, Washington.

Select companies will have seven minutes on stage for a demonstration of their best products or services. Some areas to be covered are: Person-to-person (P2P) lending, new marketing tools, better online financial security, mobile banking and payments, Web 2.0 investing, personal finance, Online PIN Debit and next-generation online banking platforms. FinovateStartup's debut last year had almost 300 executives, entrepreneurs and industry experts in attendance.

In other news, HomeATM will also be at the ETA Meeting & Expo April 21-23 at the Mandalay Bay Resort & Casino in Las Vegas. Stop by and visit us at the FIS Booth #347 and get a FREE HomeATM PIN Device!

For more info please visit Fidelity National Information Services website: http://www.fismoreinfo.com/merchant/index.asp

About HomeATM:

HomeATM owns a global patent for secure Internet PIN based transactions. Leveraging our E2EE PCI 2.0 PED certified solution, a merchant or remitter can move funds from their bank account or open loop/closed loop payment card in real-time. Utilizing HomeATM's patented solution with a bank issued card alleviates the burden for merchants to address fraud issues as HomeATM leverages the issuing bank's KYC/AML (Know Your Customer/Anti- Money Laundering) protocols. No other payment solution serves Person-to-Person, Business-to-Consumer, Business-to-Business, and Mobile Payments with the speed, security and cost-effectiveness of HomeATM. HomeATM is EMV ready and already enjoys strategic relationships with Cardinal Commerce and UATP.

For further information, visit: http://HomeATMBlog.com or contact John B. Frank, Executive Advisor, jfrank@HomeATM.net or 612.432.6980

About Fidelity National Information Services

Fidelity National Information Services (FIS) is the world's top-ranked technology provider to the banking industry. With more than 24,000 experts in 90 countries, FIS delivers the most comprehensive range of solutions for the broadest range of financial markets, all with a singular focus: helping you succeed. Every FIS solution has the strength you need for profitability today, and the power to help you manage whatever comes next.

Recently FIS entered into an agreement to acquire Metavante, a leading provider of banking and payment technologies to financial services firms and businesses worldwide. Metavante is based in Milwaukee, Wisconsin, with more than 5,900 employees and 8,000 clients worldwide. The combined company will be headquartered in Jacksonville, Florida, and will provide one of the most comprehensive ranges of integrated products and services, across more markets and more geographies than any other provider in the industry.

# # #

For more information visit: www.PINDebit.blogspot.com

To View the Official Press Release, click here

'FinovateStartup09', Finovate, HomeATM

Visa: Sell Class C Shares Sooner Than Later

UPDATE 1-Visa accelerates liquidation of Class C shares

Non-U.S. banks can sell up to 30 pct of class C shares
Liquidation could help banks raise money
Visa shares fall 2.2 percent
Visa Inc said it had accelerated the timetable for non-U.S. financial institutions to sell their shares of the world's largest payments network, in a move that could help battered banks to raise money.

Non-U.S. banks holding shares known as "Class C" can sell up to 30 percent of them any time after July 1. The prior rules allowed banks to sell their shares beginning March 25, 2011.

Visa said the release of Class C shares would not have a dilutive effect. The credit card and debit network said the Class C shares would automatically be converted into Class A shares, tradable in the public market.

Created in October 2007 from the merger of Visa U.S., international and Canadian operations, Visa Inc went public last year in the largest initial stock offering from a U.S. company. San Francisco-based Visa said the remaining Class C shares would continue to be subject to transfer restrictions that expire in 2011. To participate in the program, the foreign financial institutions will need to apply to Visa's transfer agent between July 1 and Sept. 30.

Visa's shares fell 2.5 percent to $58.86 in morning New York Stock Exchange trade. The stock is up 13 percent in 2009.

Grappling With ACH Fraud - BTN

Bank Technology News | May 2009 | By Michael Sisk

The number of paper checks being converted to ACH transactions is growing exponentially, making the channel more enticing to thieves and increasing instances of fraud. It's a problem that's starting to get the attention of the industry, says Nick Holland, a senior analyst at Aite Group. He recently surveyed 23 U.S. banks and credit unions and found that 95 percent cited ACH fraud as an important or extremely important concern.

The driving factor is that ACH is being used in ways not originally intended and that security around the channel has not kept up. "Fraud moves to the point of least resistance," Holland says, and as the access to the ACH network grows and fraudsters' sophistication advances, the ACH network may be increasingly targeted.

Continue Reading at BTN

Debit Card Usage Continues to Grow

Figures show trend towards plastic in general.

Consumer spending using credit cards grew by 2% last year, according to the latest figures from UK payments association Apacs. The organization revealed that £126.2bn was spent using credit cards in 2008, up from £123.8bn in 2007. However, retail spending using credit cards - which does not include financial payments or travel costs, among others - recorded a slight fall of 0.6% over the year, totalling £60.7bn, down from the £61.1bn spent in 2007.

Debit cards continued to grow in popularity, seeing 9.5% growth in all consumer spending and 6.8% in the retail sector.

"Despite what started to happen across the economy last year these latest figures don't reveal any marked changes from the annual trends we've seen over the past few years," said Apacs director of communications Sandra Quinn.

"Most notably consumers are increasingly choosing to use their debit cards in preference to cash or checks and also, it seems, their credit cards."

Figures released this week by the British Bankers' Association revealed that there were 93m credit card transactions in the UK during March, up 0.6m from February's total.

62% of Major Applications Breached in Last 12 Months

Over 60% Of Breaches Tied To Flaws In Business-Critical Applications

DarkReading

If you still don't think security vulnerabilities in software will necessarily catch up with you, think again: 62 percent of organizations in the last 12 months suffered data breaches as a result of bugs being exploited in their major applications, according to a newly released survey.
Forrester Consulting, commissioned by Veracode, surveyed application developers and security and risk professionals in 200 organizations in the U.S. and U.K., and found that secure software development programs are rare -- only 34 percent said they have a software development lifecycle program that integrates security.
"The survey showed that people, process, and culture are the primary inhibitors," says Matt Moynahan, CEO of Veracode, in an interview. "Security is not a core competence of enterprises developing code."

Continue DarkReading

Bling Nation Chooses Phone Factor for Validation

Bling Nation Chooses PhoneFactor to Validate Consumers' High-Ticket Items and Suspicious Transactions
Community Payment Service Offers an Unprecedented Level of Transaction Security to Their Customers

OVERLAND PARK, KS -- (Marketwire) -- 04/28/09 -- PhoneFactor, a leading provider of security products and services, today announced that Bling Nation has selected its phone-based authentication technology to protect bank customers from fraud and identity theft.

Bling Nation provides a Community Payments Service for community banks. Through this service, Bling Nation enables financial institutions to more profitably and securely support payments between their local demand deposit account (DDA) customers and their merchant customers by bypassing the current global debit payment model and replacing it with an efficient, cost-effective and local payment network.

That's where PhoneFactor comes in. One of Bling Nation's key fraud prevention features is to have consumers validate high-ticket and suspicious transactions through PIN entry on their phone before transactions are authorized. PhoneFactor enables this two-factor authentication on consumers' mobile phones by having them authenticate not only the specific transaction, but also the amount. This advanced protection can be added to retail transactions as well as ecommerce and online banking transactions. In an online transaction, out-of-band transaction verification is critical for defeating man-in-the-middle attacks and keystroke loggers.

Puneet Agarwal, COO of Bling Nation, said they chose PhoneFactor because of the company's focus and expertise providing two-factor authentication for financial services applications.

"PhoneFactor also has a robust, highly reliable technical product, and the people are open to working with us to customize the solution for an easy and friendly customer experience," Agarwal said.

About PhoneFactor

PhoneFactor is a simple two-factor authentication service that provides far greater security than usernames and passwords. The award-winning service can use any phone (mobile or landline) as a second form of authentication. PhoneFactor can be setup in minutes and eliminates the need for tokens, smart cards or certificates. Learn more at www.phonefactor.com.

About Bling Nation

Bling Nation provides a local payment network, which allows banks to convert potential on-us debit transactions into actual on-us debit transactions by offering consumers secure contactless payments at the point of sale. Bling Nation's proprietary technology enables transactions to be processed more efficiently than a traditional credit or debit card network, delivering value for the bank, merchants and consumers through its Community Payments Service. For additional information, visit www.blingnation.com.

Company Contact:
Alison Hill
913.499.4146

MRC to Lead Fraud Risk Discussion at NRF Conference

FOR IMMEDIATE RELEASE

MEDIA CONTACT: Jordan Rubin
TELEPHONE: 206.364.2789
EMAIL: jordan@merchantriskcouncil.org

MERCHANT RISK COUNCIL TO LEAD FRAUD RISK AND LOSS PREVENTION DISCUSSION AT NRF CONFERENCE

MRC Executive Director Leads In-depth Discussion on Major Fraud Prevention Advancements

(Seattle, WA—April 28, 2009) The Merchant Risk Council (MRC), a merchant-led trade association focused on electronic commerce risk and payments globally, today announced that Tom Donlea, MRC Executive Director, will moderate the session “What Every Loss Prevention/Risk Manager Must Know in Today’s Economy” as part of the National Retail Federation’s Loss Prevention Conference & EXPO in Los Angeles this June.

Donlea will lead an active panel of fraud experts from Apple, Inc. and Staples, Inc. The panel will discuss the most recent advancements that merchants have gained in fraud prevention, as well as highlight the top tips every multi-channel retailer needs to consider in minimizing risk.

“Electronic commerce plays a crucial role in our industry today,” said Rhett Asher, Vice President of Loss Prevention for the NRF, “Having such a talented group share their expertise about how to minimize the risk of fraud will be of great value to our attendees.”

The panelists for this session are veteran MRC members who will be providing attendees with real-world experiences, tips and tricks for combating e-Commerce fraud, including:

How to continuously improve your fraud/risk management system
The value of effectively managing and disputing chargebacks
The importance and impact of reporting fraud to law enforcement agencies
How payments can impact your particular e-Commerce business model (both good and bad)

This session takes place at 10:15 a.m. on Wednesday, June 17 as part of the NRF Loss Prevention Conference & EXPO at the Los Angeles Convention Center.

About Session Moderator

Tom Donlea, Executive Director, Merchant Risk Council

Tom manages a leading trade association for merchants, vendors, e-Commerce risk management professionals and law enforcement. The Merchant Risk Council (MRC) is a merchant-led trade association focused on electronic commerce risk and payments globally. The MRC leads industry networking, education and advocacy programs to make e-Commerce more efficient, safe and profitable.

About Session Panelists

Susan Grajek - Fraud Prevention Manager, Apple, Inc.

Susan leads the fraud prevention efforts for Apple’s online store and iTunes. Susan began her career in Retail Loss Prevention over a decade ago holding a myriad of positions such as Loss Prevention Coordinator, Regional LP Auditor, Credit Fraud Investigator and Assets Protection Manager. The last nine years have been fighting fraud in the world of e-Commerce. Susan also has held a Board seat with the MRC as well Conference Chair in the past.

Bob Sullivan – Director, Fraud Investigations, Staples, Inc.

Bob has been involved with Staples Asset Protection for over 15 years. As Director, Bob is responsible for all non-store investigations within Staples. For the last eight years, Bob’s primary role has been preventing online fraud attacks against Staples.com and Staples Canada. Bob’s background includes experience in Staples store security as well and distribution security. Prior to joining Staples, Bob was the Planning Director for a large New England Police department.

About the Merchant Risk Council

The Merchant Risk Council (MRC) is a merchant-led trade association focused on electronic commerce risk and payments globally. The MRC leads industry networking, education and advocacy programs to make electronic commerce more efficient, safe and profitable.

Today, with the power of its member-base, the MRC is the leading trade association for managing payments, preventing online fraud and promoting secure e-Commerce. The MRC is dedicated to working with e-Commerce and multi-channel merchants, payment processors, credit card issuers, credit card companies, alternative payment providers, risk management experts, and law enforcement to make the Internet a safer and more profitable place to do business.

The MRC Board of Directors and Advisors includes: Expedia, Inc., Adobe Systems, Inc., Neiman Marcus Direct, Apple, Inc., BestBuy.com, Bill Me Later, Blizzard Entertainment, Chase Paymentech, CyberSource Corporation, Dell, Inc., Discover Network, 41st Parameter, Gap, Inc. Direct, iovation, Microsoft, Trustwave, Visa, Inc. and Wal-Mart.

The MRC is headquartered in Seattle, Washington.

# # #

Jordan Rubin
Communications Manager
www.merchantriskcouncil.org
206.364.2789 office | 206.367.1115 fax

We have moved our offices. The MRC is now located at: 2400 North 45th Street, Suite 15 Seattle, WA 98103

KoobFace: It's In Your FaceSpace

Image representing MySpace as depicted in Crun...

Image via CrunchBase

Source: SunbeltBlog
Complete item: http://sunbeltblog.blogspot.com/2009/04/new-facebook-koobface-run.html

Description:
Koobface, a worm which steals Facebook or MySpace credentials and spams their credentials, is certainly alive and kicking. ere's a run occurring right now. You get a message from a friend:

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ43y-2j0VXS_mLWPuGxA94e78obG_oqpNWIMNgc7pvAS9mIfRBaLMr7bzwvBlZZc8-4UwuQU2DIuKyCwMbKXx26ljD0gJap2FNZvvwFJKd9aqPsU8picY20dJ4Xvi6DpCXM_eMdTlv1s/s1600-h/facbook234882348288.png

Which leads to a Facebook page:

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1vh8vv_VcrgAoSud4fcqFqIc8qxwnWy5HHMmCFMOdKeVYcN3VyCuMe1apVPgErkAIyvM6zRylmdbcmP7jgyYKgwyAp9NoihyphenhyphenLUePLQzqOjOIhLg_Ppe-Eo4wP2cztskqQDeNimA7iRho/s1600-h/facebook234892348.png

Which, when clicked, pushes a fake video codec that downloads Koobface

E-Secure-IT
https://www.e-secure-it.com

Twit or Twitout You: The Numbers Grow

Twitter Tally

Tweety Bird would never believe this.

Ifmedia attention is any indication, Twitter has exploded into an all-outphenomenon. Celebrities, politicians, entrepreneurs, business leadersand everyday users are flocking to the service en masse, generating a frenzy of activity and attention.

Everybody is talking about Twitter, but what do the numbers say? Editor's Note: This seems like a good time to let you know you can follow the PIN Payments Blog on Twitter by clicking this line.

eMarketer estimates there were roughly 6 million Twitter users in the US in 2008, or 3.8% of Internet users.

eMarketer projects that the number of Twitter users will jump to 18.1 million in 2010, representing 10.8% of Internet users.

By all measures, Twitter is growing, and quickly.

comScorereported that Twitter.com drew 4 million unique visitors from home,work and college/university locations in February 2009, up from 340,000a year earlier—a 1,086% increase.

Nielsen Online reported 7 million unique visitors to Twitter.com during the month, up even higher—1,381%—from 475,000 the prior year.

The Competefigures were higher for the month charted, and according to its latestfigures, Twitter had over 14 million unique users in March 2009.

comScore also reported a surge in March. After months ofdouble-digit growth, traffic to Twitter.com accelerated 131% to 9.3million visitors for the month.

And the number of Twitter users is considerably greater thanthe number of visitors to Twitter.com, as a result of the multipleaccess points for the service (for example, mobile devices and desktopapps).
What’s driving this phenomenal growth?

“Twitter lets people know what’s going on about things they careabout instantly, as it happens,” Evan Williams, Twitter’s CEO, told The New York Times. “In the best cases, Twitter makes people smarter and faster and more efficient.”

A survey of Twitter users from MarketingProfsbacks Mr. Williams’ views. On a scale from 1 to 5 (with 1 for stronglydisagree and 5 and for strongly agree), the phrase “I find it excitingto learn new things from people” averaged a score of 4.65 and “I valuegetting information in a timely manner” averaged 4.58.

“Above all, people on Twitter are truly motivated by learningnew things and getting information real-time, as it’s developing,” saidAnn Handley of MarketingProfs.

To follow eMarketer on Twitter, and definitely get smarter and faster and more efficient, click here.

Source: IT Pro
Complete item: http://www.itpro.co.uk/610657/olympics-could-be-hit-by-cyber-attack-says-blunkett?CMP=NLC-Newsletters

Description:
Labour MP David Blunkett will warn that the London Olympics could be under threat from a severe cyber attack unless urgent action is taken, according to reports.

At a keynote this week's Infosecurity Conference, he will also claim that terrorists could use sophisticated hacking to cause a complete meltdown of computer and communication systems.

Blunkett will also stress that there is a woeful level of awareness of the cyber attack threat and urge that government, security experts and businesses work together to make Britain more secure.

In reference to the dangers posed to London 2012, he is to say that the threat of criminals engaging in sophisticated fraud can be compared to the danger of more traditional terrorism.

Visitor requirements such as ticketing, transportation and hotel bookings could be disrupted.

He will say that the Games represents an opportunity for fraudsters and those seeking to hurt the economy.

Blunkett will also claim that duplication and hacking into information could allow criminals to disrupt facilities and commit the theft of identity, credit cards and other personal data.

Last year, BT said that it will treat the London Olympics as a major incident.

David Blunkett's constituency had not responded to IT PRO's request for comment at the time of publication.

Monday, April 27, 2009

March 2009 Top Online Retail Categories

Top Online Retail Categories
Source: Practical eCommerce

According to a report by Nielson Online, the Top Online Retail Categories were led by Event and movie tickets, which earned average orders of $252.14 in March 2009

The report from Nielsen Online via MarketingCharts.comshowed that the ticket category outpaced its closest competitorcategory, computer hardware, by more than $63 per average order.

Automotive-related products and consumer electronics each generatedslightly more than $120 on a typical order, while child and baby careitems, sporting goods, home and garden products, office supplies, andfood products all hovered near $75 in revenue for a customary order.

Digital River Chosen by Kodak for eCommerce

Kodak selects Digital River to run global e-commerce operations

Minneapolis, Apr. 27, 2009 -- Digital River, Inc. (NASDAQ: DRIV - News), a leading provider of global e-commerce solutions, announced that it is significantly expanding its relationship with Eastman Kodak Company to manage Kodak’s global e-commerce operations. Under the agreement, Digital River will be providing a full range of e-commerce and e-marketing services to support all consumer online sales of Kodak’s innovative line of digital cameras, digital video cameras, digital picture frames, all-in-one inkjet printers, film and accessories across multiple countries in North America and Europe.

“Conducting cross-border e-commerce is a complex proposition involving multiple languages and currencies, banking relationships, international regulations, taxes and more,” said Joel Ronning, Digital River’s CEO. “Digital River has the global footprint, infrastructure and e-commerce expertise to help companies cut through this complexity and successfully enter online markets much faster and with less risk than they can on their own. We are pleased to expand our relationship with Kodak and work with them in delivering their world-class brand and products to customers around the globe.”

In addition to the new global agreement, Digital River currently manages business-to-business e-commerce sites for Kodak’s Document Imaging and Print on Demand Solutions groups.

About Kodak

As the world’s foremost imaging innovator, Kodak helps consumers, businesses, and creative professionals unleash the power of pictures and printing to enrich their lives. To learn more, visit http://www.kodak.com and follow our blogs and more at http://www.kodak.com/go/followus .

About Digital River, Inc.

Digital River, Inc., a leading provider of global e-commerce solutions, builds and manages online businesses for software and game publishers, consumer electronics manufacturers, distributors, online retailers and affiliates. Its multi-channel e-commerce solution, which supports both direct and indirect sales, is designed to help companies of all sizes maximize online revenues as well as reduce the costs and risks of running an e-commerce operation. The company’s comprehensive platform offers site development and hosting, order management, fraud management, export controls, tax management, physical and digital product fulfillment, multi-lingual customer service, advanced reporting and strategic marketing services.

Founded in 1994, Digital River is headquartered in Minneapolis with offices across the U.S. as well as Brazil, China, England, Germany, Ireland, Japan, Luxembourg and Taiwan. For more details about Digital River, visit the corporate Web site at www.digitalriver.com or call 952-253-1234.

Source: Company press release.

About HomeATM

Click the Links Below to Learn More:

Contact HomeATM

Yahoo! Profit Plunges 78% in Q1 - BooHoo!

Source: CBR

Yahoo profit plunges 78% in weak Q1
Published:27-April-2009

By Datamonitor staff writer

Plans to cut its workforce by 5%

Yahoo has reported a 78% decline in net income at $118m for the first quarter 2009, compared to $537m in the year-ago quarter, on revenue down 13% at $1.6 billion. It said it plans to cut its workforce by 5% after profit was hit by currency rate fluctuations, the sale of Kelkoo, and lower revenue from broadband partnerships, voice-over IP services, and subscription music offerings.

During the quarter, operating income declined 17% to $101m, while diluted EPS fell 80% to $0.08, compared to $0.37 in the first quarter of 2008.

Marketing services revenue declined 12% to $1.38 billion, with owned and operated sites revenue decreasing 10% to $872m and affiliate sites revenue decreasing 16% to $511m. Fees revenue fell 20% to $197m. Geographically, US revenue declined 9% to $1.2 billion, while international revenue fell 23% to $392m.

Franklin Savings Bank Website Hit by Malware

Source: spamfighter
Complete item: http://www.spamfighter.com/News-12258-Malware-Compelled-Franklin-Savings-Bank-to-Shutdown-Website.htm

Description:
The Franklin Savings Bank (Farmington, USA), which shutdown its marketing site for the 2nd time in a week, put online customers at inconvenience. (See picture on left...we've got security AND convenience)

However, early detection proved helpful in preventing a malware from spreading.

On April 9, 2009, customers could not access the bank's site, as the bank took it offline following the malware's detection by their security mechanisms. The problem appeared again on April 15, 2009, resulting in another shutdown till the bank shifted site to some other Web host.

Presently, consumers attempting to visit Franklin Savings Bank's websites, www.franklinebranch.com, www.westernmountainfinancial.com and www.fsbme.com would find a warning that says these websites are not available because of system maintenance.

Tim Thompson, Senior Vice President, Franklin Savings Bank, said that the malware that attacked their web page in the 2nd week of April 2009 seemed to be spreading widely on the PC servers belonging to the web hosting firm, as reported by sunjournal on April 17, 2009.

Thompson further said that they blocked access to the page again so that the threat did not reach their clients. According to him, the bank was shifting to a new hosting firm and soon they would have a new page for its visitors.

Meanwhile, authorities stated that client data was safe as the affected website was not linked to the bank's operations. They also said that it was essential to know that the bank's marketing website was separate from the software for online banking and it did not have any link with customer information.

E-Secure-IT
https://www.e-secure-it.com

U.S. Online Sales Up

US Online Sales Up
Source: eMarketer
APRIL 27, 2009

In dark days, e-commerce shines.

Most US economic indicators were down in Q1 2009, but online sales were an exception.
According to a survey by Forrester Research and Shop.org, US online retail sales rose an average of 11% in the first three months of 2009.

Of the 80 companies studied, 58% saw online sales increases compared with the same quarter last year.

Looking further into the findings, 44% of the e-tailers reportedincreases of over 10%, 14% showed increases up to 10% and 13% reportedflat sales.

In the survey, about 70% of both consumer brand manufacturersand multichannel retailers reported online sales increases. However,Web-only merchants had a different situation. About six in 10 reportedWeb sales declines.

“It seems that consumer confidence is getting better,”Sucharita Mulpuru, a Forrester analyst, told Bloomberg News. “Hopefullythe worst is behind us.”

Looking ahead, Citi Investment Research projects that US retail e-commerce sales will grow 4.4% in 2009 to $141 billion—and jump to 16.5% growth in 2010.

Could happy days be here—at least online—again? Maybe not for Web-only retailers.

Federal Reserve Worker Steals Bank Information

- Banking / Finance News
Source: Finextra
Complete item: http://www.finextra.com/fullstory.asp?id=19965

Description:
A former IT worker at the Federal Reserve Bank of New York (FRB-NY) and his brother have been arrested for allegedly stealing the personal information of bank employees and using it to obtain loans.

Curtis Wiltshire worked as an information and technical analyst at the Federal Reserve Bank of New York in lower Manhattan, providing him with access to information about other employees, including names, dates of birth, social security numbers and photographs.

E-Secure-IT
https://www.e-secure-it.com

ATM Skimming 101

Banking/Finance - ATM / POS
Source: ABC News
Complete item: http://abcnews.go.com/Technology/Business/story?id=7434509&page=1

Description:
Sean Seibel thought it looked just like any other ATM -- at least at first.

Earlier this month, the 33-year-old Microsoft employee, who lives in New York City, stopped in the closest Chase bank to get some cash to pay his barber. But when he inserted his ATM (automatic teller machine) card in the machine, he noticed a bit of resistance.

The screen said the machine was unable to read his card. So he tried again. But a second time, the machine gave him an error message.

He was about to give up and try another machine, when a thought popped into his head. He had heard about devices that fraudsters attach to the outside of card readers on ATM machines and, though it seemed unlikely, wondered if that was the source of his problem.

"I'm looking at the thing and thinking this can't be - no way," he said. "There are all these stories and myths about it, but I actually found one in the wild."

With a combination of fear and exhilaration, he tried to pull on the green plastic surrounding the card slot and found that it peeled right off.

Three Skimmers Found in One Week

But that same week Nick McGlynn, a 26-year-old photographer, also spotted an ATM skimmer at a different Chase bank in New York City. He had just read about Seibel's experience on a technology blog, when he walked by a set of Chase ATMs that looked peculiar.

"From the window, I could see a mirror centered on one ATM but no mirror on another," he said.

E-Secure-IT
https://www.e-secure-it.com

HomeATM at FinovateStartup09 Tomorrow

After a fantastic week in Las Vegas at the ETA Show, we are scheduled to participate in FinovateStartup09 tomorrow. I depart Phoenix for San Francisco this morning to meet up with HomeATM CEO Ken Mages and COO, Mitch Cobrin who flew directly there from Las Vegas. It looks to be an exciting time and we look forward to meeting with several other providers of financial innovations whom were also invited to participate. We've got a filmed demo scheduled for this afternoon and then you can look for some sporadic coverage of FinovateStartUp09 during the course of the day tomorrow. For more information on FinovateStartup09, click the following link: www.finovate.com I've included a copy of our press release (below) announcing our participation which also provides more details about the event. Off to the airport!

HomeATM to Participate in FinovateStartup09

HomeATM has been invited to to discuss themerits of their innovative Internet PIN Debit Solution atFinovateStartup09, to be held in San Francisco on April 28th.

FOR IMMEDIATE RELEASE

PRLog (Press Release) – Apr 10, 2009 – Chicago: HomeATM is pleased to announce that itwill be participating at the FinovateStartup09 Conference, April 28, inSan Francisco, California. HomeATM CEO Ken Mages and COO Mitch Cobrin will be discussing thecompany's patented and PCI 2.0 Certifed Online PIN Debit Solution.

HomeATM engineered and now manufactures the World's First and OnlyPIN Entry Device designed specifically for eCommerce use. The PaymentCard Industry, which consists of representatives from Visa, MasterCard,American Express, Discover and JCB International, approved the devicelast month in a milestone event toward PIN Debit on the web becomingubiquitous. A majority of industry experts agree that a hardwareapproach towards PIN Debit for the web is the only way to secure andprotect valuable cardholder data from fraudsters.

"We are pleased to be able to demonstrate why a hardware approachto protecting cardholder data in a web based transaction is far moresecure than any other approach imaginable," said John B. Frank,HomeATM Executive Advisor. "Swiping one's card is not onlyexponentially more secure than typing in one's 14-16 digit PersonalAccount Number, but one could argue that it's also 14-16 times moreconvenient."

The HomeATM PIN device plugs into any USB port in milliseconds andis Plug and Play...there is no software or drivers that need to beinstalled.

"When a consumer swipes their card using HomeATM's SafeTPIN, itresults in a "Card Present" transaction, which is not only a moresecure way to process bank cards, but provides the merchant withsignificantly lower Interchange fees," Frank explained. "By incorporating a PIN Pad into their device, merchants enjoy a duallyauthenticated transaction, which provides them with "true" PIN DebitInterchange as well."

"The value we can provide internet merchants is enhanced with our recent PCI 2.0 Certification," continued Frank. "We can effectively remove the Internet Retailer from the scope of PCI DSS providing "instant compliance," which could potentially save them hundreds of thousands in costs associated with the compliance process"

HomeATM's PCI 2.0 Certified SafeTPIN was also designed to be usedas an authentication device, replacing easily hacked Username/Password:protocols curiously employed by financial institutions for onlinebanking. Swiping one's bank card and entering their PIN outside thebrowser space provides military grade encryption as it uses Triple DESand DUKPT key management protocols.

With the recent rash of breaches, it is important to provideconsumers and merchants with the most secure payment and authenticationmechanisms available. In the brick and mortar world, that mechanism isPIN Debit. HomeATM is poised to bring it to the other world...theworld wide web.

FinovateStartup is a spin-off of the New York City-based Finovateconference, the first demo-focused conference in financial technology.It is organized by Online Financial Innovations, a boutique bankingtechnology research firm based in Seattle, Washington.

Select companies will have seven minutes on stage for ademonstration of their best products or services. Some areas to becovered are: Person-to-person (P2P) lending, new marketing tools,better online financial security, mobile banking and payments, Web 2.0investing, personal finance, Online PIN Debit and next-generationonline banking platforms. FinovateStartup's debut last year had almost300 executives, entrepreneurs and industry experts in attendance.

In other news, HomeATM will also be at the ETA Meeting & ExpoApril 21-23 at the Mandalay Bay Resort & Casino in Las Vegas. Stopby and visit us at the FIS Booth #347 and get a FREE HomeATM PINDevice!

For more info please visit Fidelity National Information Services website: http://www.fismoreinfo.com/merchant/index.asp

About HomeATM:

HomeATM owns a global patent for secure Internet PIN basedtransactions. Leveraging our E2EE PCI 2.0 PED certified solution, amerchant or remitter can move funds from their bank account or openloop/closed loop payment card in real-time. Utilizing HomeATM'spatented solution with a bank issued card alleviates the burden formerchants to address fraud issues as HomeATM leverages the issuingbank's KYC/AML (Know Your Customer/Anti-Money Laundering) protocols. No other payment solution serves Person-to-Person, Business-to-Consumer, Business-to-Business,and Mobile Payments with the speed, security and cost-effectiveness ofHomeATM. HomeATM is EMV ready and already enjoys strategicrelationships with Cardinal Commerce and UATP.

For further information, visit: http://HomeATMBlog.com or contact John B. Frank, Executive Advisor, jfrank@HomeATM.net or 612.432.6980

About Fidelity National Information Services

Fidelity National Information Services (FIS) is the world'stop-ranked technology provider to the banking industry. With more than24,000 experts in 90 countries, FIS delivers the most comprehensiverange of solutions for the broadest range of financial markets, allwith a singular focus: helping you succeed. Every FIS solution has thestrength you need for profitability today, and the power to help youmanage whatever comes next.

Recently FIS entered into an agreement to acquire Metavante, a leadingprovider of banking and payment technologies to financial servicesfirms and businesses worldwide. Metavante is based in Milwaukee,Wisconsin, with more than 5,900 employees and 8,000 clients worldwide.The combined company will be headquartered in Jacksonville, Florida,and will provide one of the most comprehensive ranges of integratedproducts and services, across more markets and more geographies thanany other provider in the industry.

# # #

For more information visit: www.PINDebit.blogspot.com

To View the Official Press Release, click here

Google "Profiling" Facebook

Is Google Targeting Facebook for a Hit?

Editor's Note: Based on conversations I've had with several people, the general consensus is that Facebook is teetering on the brink of "has been" land. Or should I say "tweetering?" For example, they certainly could use a person to person payment platform, yet recently announced they have killed that idea. I don't know what they are waiting for. (Maybe for a couple of their 20 somethings to hit 30 and be a little smarter)) Problem is...I don't know if they have the luxury waiting...

Here's an article which flat out states that Facebook is being "profiled" and will be "faced" by Google.

Google has a "Facebook killer" on its hands. And, no, I'm not talking about Google's Orkut social network (unless you live in Brazil, where Orkut has already "killed" Facebook).

Google is just one acquisition away from offering a social network that does everything Facebook does, minus all the things everybody hates about Facebook.

This social network is called Google Profiles.

You can choose a "vanity URL" of sorts, meaning you can use your Gmail address as part of your Google Profiles URL. (The URL used to use a long string of numbers.) For example, my new URL is: www.google.com/profiles/mike.elgan

Looking at it now, you'd never guess that Google Profiles is the biggest potential threat to Facebook anywhere. But Profiles is still missing one crucial ingredient. (Editor's Note: Can you say: "Twitter"?)

Read the full story

facebook, google, profile

Google, Money Laundering and the Shell Game

Source: News
Complete item: http://www.news.com.au/dailytelegraph/story/0,22049,25375352-5015795,00.html

GLOBAL banking and tax laws are a joke, says an Australian university researcher who used Google and $10,000 to establish a series of shell corporations which could easily have been used by criminal organizations to launder money.

Professor Jason Sharman, from Queensland's Griffith Business School, set up shell corporations and bank accounts without any identification. A shell company serves as a means for conveyance for business transactions without necessarily having assets.

He found it was banks in the US and UK which were flouting the rules, not the smaller island tax havens. In one case, he said, a US provider in Wyoming offered to use their own employees' social security numbers as the tax identification number for a corporation.

Prof Sharman set out to see how difficult it was to violate recent global standards stopping anonymous participation in the international financial system. He emailed 45 corporate service providers across 22 countries soliciting offers to set up anonymous shell corporations - and 17 agreed.

Of these, 13 were from OECD countries, including seven in the United Kingdom, four in the United States, one in Spain, and one in Canada, and the remaining four from some of the 28 better known tax havens.

E-Secure-IT
https://www.e-secure-it.com

SONY LAUNCHES CONTACTLESS PAYMENTS TV REMOTE

SONY LAUNCHES CONTACTLESS PAYMENTS TV REMOTE

Sony has launched a television remote control with a built in contactless reader that can be used to pay for watching on-demand content.

More on this story: http://www.finextra.com/fullstory.asp?id=19966

or go to Engadget to see more: http://www.engadget.com/tag/felica/

Tuesday, April 28, 2009

Twitter Tally

Tweety Bird would never believe this.

Monday, April 27, 2009

In dark days, e-commerce shines.

Disqus for ePayment News