A cybercrime ring may have stolen nearly $4bn from more than 192,000 accounts over a two-year period using malware to intercept Brazilian online payment system Boleto, according to a paper published by RSA.

The malware has only been found through Boleto transactions processed on PCs running Microsoft Corp’s Windows software.

The members of the cybercrime ring were using a program known as ‘Eupuds’, which re-directed funds from Brazil’s Boleto Bancário online payment system.

The paper says that the malware fraud could have affected at least 34 different bank brands in Brazil.

RSA said they believe the operation, which may have begun as early as late 2012, is still going on. It has already handed over fraudulent Boleto ID numbers and attack characteristics to the FBI and Brazil’s federal police.

A representative for Brazilian banking association FEBRABAN declined to comment on the report, saying the group was not granted access to its content.

How well do you really know your competitors?

Access the most comprehensive Company Profiles on the market, powered by GlobalData. Save hours of research. Gain competitive edge.

Company Profile – free sample

Thank you!

Your download email will arrive shortly

Not ready to buy yet? Download a free sample

We are confident about the unique quality of our Company Profiles. However, we want you to make the most beneficial decision for your business, so we offer a free sample that you can download by submitting the below form

By GlobalData
Visit our Privacy Policy for more information about our services, how we may use, process and share your personal data, including information of your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.