Equifax Reports Rising Fraud In Canada: Cyber Security Today for Friday, March 7, 2025

Summary

Cybersecurity Today: Equifax Reports Rising Fraud in Canada Hosted by Jim Love | Released on March 7, 2025

In the March 7, 2025 episode of Cybersecurity Today, host Jim Love delves into the pressing issue of increasing fraud in Canada, as highlighted by a recent Equifax report. The episode provides a comprehensive analysis of the current cybersecurity landscape, including significant law enforcement actions against major cybercriminal entities and the emergence of a formidable new botnet responsible for record-breaking Distributed Denial of Service (DDoS) attacks.

---

1. Rising Fraud in Canada: Public Concerns and Equifax Findings

Jim Love opens the episode by framing the discussion within Fraud Prevention Month, emphasizing the gravity of the situation based on Equifax Canada's latest report. The survey reveals that nearly 90% of Canadians believe companies are insufficient in protecting personal data, and over half feel powerless against fraud (00:01).

Key Insights:

• Public Distrust: The survey uncovers significant public frustration, with 55% of respondents convinced that identity thieves will always stay ahead (00:01).
• Demographic Vulnerabilities: Seniors and residents of Quebec exhibit heightened concerns, demanding stronger protections and more comprehensive fraud education.
• Auto Fraud Surge: There's a notable increase in auto fraud, driven by falsified documents and inflated incomes, particularly affecting newcomers to Canada and individuals with limited credit histories. These groups experience auto fraud rates more than twice as high as established borrowers (00:01).
• Mortgage Fraud Trends: While overall mortgage fraud has declined, the issue of falsified financial documents persists, constituting over 90% of fraudulent mortgage applications (00:01).

Notable Quote: Carl Davies, Head of Fraud and Identity at Equifax Canada, emphasizes the financial toll on both individuals and banks, stating, "Every dollar lost to a fraudster costs significantly more money for all parties involved (00:01)."

Public Demand for Action:

• Collaborative Efforts: A staggering 88% of Canadians believe that financial institutions and governments must collaborate to combat fraud.
• Accountability Measures: 82% advocate for penalties against companies that fail to protect customer data, highlighting the public's call for greater corporate responsibility (00:01).

Jim Love underscores the critical need for enhanced fraud prevention strategies, noting that 51% of surveyed individuals are unsure how to respond to fraud, pointing to a gap in public education and awareness (00:01).

---

2. Major Law Enforcement Actions Against Cybercrime

Transitioning from public concerns, Jim Love highlights significant strides made in the fight against cybercrime through international law enforcement collaborations.

Dismantling 8Base Ransomware Group:

• Operation Details: Led by Europol, authorities arrested four Russian nationals linked to the 8Base ransomware group, notorious for deploying Phobos ransomware to extract payments globally (00:01).
• Impact: The seizure of 27 servers disrupted the group's activities, which had been active since 2022 and targeted organizations in the United States and Brazil, including the United Nations Development Program (00:01).
• Tactics: 8Base employed double extortion methods, encrypting victim data and threatening publication unless ransoms were paid (00:01).

Closure of Garantex Cryptocurrency Exchange:

• Seizure and Shutdown: The US Secret Service seized the web infrastructure of Garantex, a Russian cryptocurrency exchange implicated in laundering illicit funds for cybercriminals (00:01).
• Financial Impact: Tether blocked digital wallets on Garantex containing over 2.5 billion rubles (~$28 million), leading to the suspension of all services by the exchange (00:01).
• Regulatory Violations: Garantex was under scrutiny for facilitating transactions for sanctioned Russian banks and evading EU sanctions related to the Ukraine conflict (00:01).

Significance: Jim Love highlights that these actions represent a significant blow to the Russian cybercriminal ecosystem and exemplify the effectiveness of global cooperation in combating cybercrime. However, he warns that such groups are likely to regroup and resurface, maintaining vigilance is essential (00:01).

Notable Quote: Jim Love remarks, "By dismantling operations like 8Base and Garantex, authorities aim to deter future cyber threats and protect potential victims worldwide (00:01)."

---

3. Emergence of a New Botnet and Record-Breaking DDoS Attacks

In a concerning development, a newly identified botnet has swiftly emerged, orchestrating some of the largest DDoS attacks on record.

Botnet Characteristics:

• Rapid Proliferation: The botnet appeared almost overnight, leveraging a vast network of compromised IoT devices such as IP cameras and home routers (00:01).
• Attack Scale: The DDoS campaigns have surpassed previous records, with some attacks reaching unprecedented data transmission rates, echoing the magnitude of historical attacks like the 622Gbps assault on Krebs on Security and the 1Tbps attack on OVH (00:01).

Comparative Analysis: Jim Love compares the new botnet to notorious strains like Mirai and Bashlight, which exploited default credentials and infected Linux-based systems to launch massive DDoS assaults (00:01).

Security Implications:

• Persistent Vulnerabilities: The botnet's effectiveness highlights ongoing vulnerabilities within IoT ecosystems, where many devices remain susceptible due to weak or default credentials and outdated firmware (00:01).
• Necessity for Robust Practices: The sheer scale of these attacks underscores the urgent need for enhanced cybersecurity practices and the development of more secure IoT devices to prevent such large-scale exploits (00:01).

Mitigation Strategies:

• Collaborative Efforts: Internet service providers and cybersecurity firms are actively working together to mitigate the effects of these large-scale DDoS attacks through traffic filtering, rate limiting, and deploying advanced DDoS protection solutions (00:01).

Notable Quote: Jim Love concludes, "The emergence of this botnet serves as a stark reminder of the ongoing challenges in securing the expanding landscape of connected devices against sophisticated cyber threats (00:01)."

---

4. Conclusion: The Road Ahead for Cybersecurity in Canada

In wrapping up the episode, Jim Love reflects on the intertwined nature of rising fraud rates, evolving cyber threats, and the critical need for collaborative efforts between corporations, governments, and the public. The episode emphasizes that as fraud tactics and cyber threats continue to advance, so too must the strategies to combat them. Enhanced public education, stricter corporate accountability, and robust international law enforcement cooperation are pivotal in safeguarding against the ever-evolving landscape of cybercrime.

Final Thought: Jim Love leaves listeners with a cautious optimism, recognizing the recent successes in disrupting cybercriminal operations but also acknowledging the persistent and adaptive nature of these threats. He encourages ongoing vigilance and proactive measures to protect personal and corporate data in an increasingly digital world (00:01).

---

For more detailed insights and access to the Equifax survey, listeners are directed to the show notes linked in the episode.

Transcript

[Jim Love]

As we enter Fraud Prevention Month, an Equifax report shows fraud in Canada is rising. Two major law enforcement actions dismantle the eight Base ransomware and Garen Tex Crypto exchange and an emerging botnet sets a new record for DDoS attacks. This is Cybersecurity Today. I'm your host Jim Love. Nearly 90% of Canadians believe companies aren't doing enough to protect their personal data, and more than half feel powerless against fraud, according to new data from Equifax Canada. As fraud rates climb, concerns are particularly high among seniors and Quebec residents who are demanding stronger protections and broader fraud education. The Equifax survey highlights growing public frustration, with 55% of respondents convinced that identity thieves will always be one step ahead. Auto fraud is a major concern, with falsified documents and inflated incomes driving a surge in fraudulent applications. Consumers new to Canada and those with limited credit history were hit especially hard facing auto fraud rates more than twice as high as established borrowers. Mortgage fraud has declined, but falsified financial documents remain a persistent issue, making up over 90% of fraudulent mortgage applications. Fraud prevention is a major concern for many Canadians, said Carl Davies and head of fraud and identity at Equifax Canada. Every dollar lost to a fraudster costs individuals and banks significantly more money. Canadians, especially older adults, are demanding better safeguards to prevent financial crimes and identity theft. The report also underscores the demand for stronger corporate and government action. While 88% of Canadians believe that financial institutions and governments must work together to combat fraud, 82% said companies that fail to protect customer should face penalties. As fraud tactics evolve, consumer concerns will likely continue to grow, along with calls for greater accountability from businesses and policymakers and one number that should give pause to those who are charged with educating the public. 51% of those surveyed are unsure about how to respond to fraud. There's a link to the survey in our show notes. In a significant crackdown on cybercrime, international law enforcement agencies have dismantled two major the eight Base Ransomware group and the Russian cryptocurrency exchange Guarantex. A coordinated effort led by Europol resulted in the arrest of four Russian nationals associated with the 8base ransomware group, known for deploying Phobos ransomware to extort payments from victims worldwide. Their operation led to the seizure of 27 servers linked to the criminal network, significantly disrupting their activities. 8 base had been active since 2022, employing double extortion tactics, encrypting victims data and threatening to publish it unless ransoms were paid. Their targets included organizations in the United States and Brazil, notably the United Nations Development Program. In a separate operation, the US Secret Service seized the Web infrastructure of Guarantex, a Russian cryptocurrency exchange implicated in laundering illicit earnings for cybercriminals, including ransomware gangs and darknet marketplaces. Following the seizure, Garantech suspended all services, including cryptocurrency withdrawals, after Tether blocked digital wallets on its platform containing over 2.5 billion rubles, or approximately $28 million. Garantex had been under scrutiny for its alleged involvement in facilitating transactions for sanctioned Russian banks and circumventing European Union sanctions related to the conflict in Ukraine. The exchange's shutdown represents a significant blow to the Russian cybercriminal ecosystem. Both of these show the results of global cooperation in combating cybercrime and disrupting the financial infrastructure that supports illegal activities. By dismantling operations like 8 base and Guarantec's authorities aim to deter future cyber threats and protect potential victims worldwide. And while these are encouraging results, we are aware that these groups tend to regroup and resurface. But for now, let's just take it as a win. A newly identified botnet has rapidly emerged, orchestrating some of the largest distributed denial of services, or DDoS, attacks on record. This botnet, which appeared almost overnight, has been linked to massive DDoS campaigns targeting various online services. Security researchers have observed that this botnet leverages a vast network of compromised devices, primarily Internet of Things gadgets such as IP cameras and home routers. The scale of the attacks has surpassed previous records, with some assaults reaching unprecedented data transmission rates. The botnet's rapid proliferation and attack patterns bear similarities to notorious malware strains like Mirai and Bashlight. Mirai, for instance, exploited default credentials in IoT devices to amass a botnet responsible for significant DDoS attacks in 2016, including 622 gigabyte per second assault on the Krebs on Security website and a 1 terabyte per second attack attack on the French web host OVH. Similarly, Bashlight infected Linux based systems to launch DDoS attacks, with some incidents peaking at 400 gigabytes per second. The emergence of this botnet underscores the persistent vulnerabilities within IoT ecosystems. Despite increased awareness and security measures, many devices remain susceptible to exploitation due to weak or default credentials and outdated firmware. The sheer size and impact of these attacks highlight the necessity for robust cybersecurity practices and the development of more secure IoT devices. Internet service providers and cybersecurity firms are actively collaborating to mitigate the effects of these large scale DDoS attacks. Strategies include traffic filtering, rate limiting, and deploying advanced DDoS protection solutions to safeguard critical infrastructure and services. As this situation evolves, it serves as a stark reminder of the ongoing challenges in securing the expanding landscape of connected devices against sophisticated cyber threats. And that's our show. Catch us on the weekend for our interview show if you can. Otherwise, I'll talk to you again on Monday morning with the cybersecurity news. I'm your host, Jim Love. Thanks for.