Ffnews Spanish Banks Face 150% Rise in Fraud from Stolen Devices
Article Content
- •Fraud from stolen devices in Spain surged by 150% in the past year.
- •Social engineering scams account for 60% of total fraud losses in the region.
- •BioCatch reports a 35% increase in malware sessions linked to job and investment scams.
Spanish financial institutions have reported a 150% increase in fraud linked to stolen devices over the past year. This surge is primarily driven by social engineering scams, which now account for 60% of total fraud losses. Criminals are exploiting stolen devices to drain victims' bank accounts and sell the hardware, creating a 'double-profit' scheme. The average value of fraud attempts has risen by 63%, with attempted fraud sessions increasing by 19% and attempted scams by 46%. Malware sessions have also surged by 35%, often associated with bogus trading apps and investment scams. The use of AI-generated voice cloning and video calls has made these scams more convincing. BioCatch, a company specializing in behavioral biometrics, is working with affected banks to enhance fraud detection by analyzing user behavior patterns.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track BioCatch in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of scams are most prevalent?
How are stolen devices being exploited?
What measures are banks taking to combat this fraud?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…