The D&D Daily Mobile Edition
LP, AP & IT Security's #1 News Source

Top Industry News
 

A Columbia couple charged with selling counterfeit goods on eBay and other online retailers

A Columbia couple faces numerous federal charges for allegedly selling counterfeit products valued at more than $2.6 million.

A grand jury on Friday indicted Tabitha and Clint Rodgers on seven counts of wire fraud, six counts of fraud, smuggling, counterfeiting labels, copyright infringement, trafficking in counterfeit goods and conspiracy to commit mail fraud.

According to case documents, over the course of several years the couple received multiple shipments of a variety of fake goods from known counterfeiters in China. The shipments were sent to the couple’s home, where they were resold on eBay and other e-commerce websites at a profit. The grand jury charged the couple had been running the scheme since August 2011. Read more

For further information on PROACT, email inquiries to PROACT@eBay.com.

Spotlight on S-Tron
 

S-TRON's Military Leadership -
"Failure Is Not an Option"

At S-TRON, military leadership has been found to not only bring success but also create an atmosphere of true partnership with customers across the country.

S-TRON, one of the nation's leading full-service security providers to national retailers, has intentionally based its business model on military leadership qualities since the beginning. This leadership starts at the top with CEO Steven Dunn, who while serving in the Navy received the Expeditionary Force Award for being part of a multinational peacekeeping force in in the Beirut Lebanon war zone.

Pete Mattschull, S-TRON's President, decorated with the Navy Expedition Medal, Armed Forces Expeditionary Medal and the Navy Achievement Medal has been a driving force at S-TRON since 2003.

Through rough seas and smooth sailing alike, Dunn and Mattschull have assembled an ever growing team of military veterans and highly skilled civilians that is second to none in the security industry. And because of this operational military environment, S-Tron customers enjoy Respect, Reliability and a high-level of Communication.

"No customer left behind" is not just the S-Tron mantra, Pete Mattschull says "it's our way of life".

ABOUT S-TRON
S-TRON is an electronic security integrator for national and regional retailers with thousands of installation locations and headquarters in Melville, New York. S-TRON provides outstanding customer service for national retail, grocery stores, restaurants and C-stores.

Why Retailers Must Prioritize Cybersecurity in the Mobile Era
By 2025, 60 percent of U.S. consumers believe that the average shopper will carry a phone but no physical wallet, according to data published by consumer financial services company Synchrony. What’s more, 67 percent of respondents to the Synchrony Retailer Survey said that they’ve downloaded a retailer’s application, findings that are indicative of a culture dominated by use of mobile devices, particularly smartphones.

At the same time, a report published by ThreatMetrix finds that one-third of all fraud now targets mobile channels. In the first half of 2018 alone, mobile attack rates increased 24 percent compared with 2017, according to the report.

“Mobile is quickly becoming the predominant way people access online goods and services, and as a result, organizations need to anticipate that the barrage of mobile attacks will only increase,” noted LexisNexis Risk Solutions Chief Identity Officer Alisdair Faulkner.

Retailers Face Distinctive Challenges for Mobile Security

Increasingly, retailers must focus on how to keep their mobile customers safe from growing cyberthreats. According to the Verizon Mobile Security Index 2018 Report, 82 percent of retail and hospitality professionals surveyed said mobile devices are a risk, with 22 percent of respondents calling that risk significant, in large part due to the temporary nature of many in the workforce.

“Retail and hospitality companies face distinctive challenges when it comes to mobile security,” the report states. “Many of them have large numbers of employees, often employed on part-time or seasonal contracts. These employees may not take security precautions as seriously as full-time or permanent employees.”

Still, the report also finds that nearly 90 percent of enterprises surveyed have only one of four basic mobile security measures (changing all default passwords; encrypting data sent over public networks; restricting access on a need-to-know basis, regularly testing security systems) in place; conversely, only 1 in 7 companies had all four practices in place. biztechmagazine.com

AT&T, T-Mobile Sued Over Mobile Crypto Thefts
America’s leading cryptocurrency investor law firm — announced it has filed lawsuits against AT&T and T-Mobile on behalf of crypto asset holders who were allegedly victims of “SIM swapping.”

The suit alleges that by leaving holes in their security protocols, and failing to train and monitor employees adequately, the phone providers assisted criminals in remotely taking over smartphone SIM cards, allowing them to access financial records and account information to steal cryptocurrency and other assets.

The complaint explains how one of Silver Miller’s clients — an AT&T account holder — was robbed of over $621,000 in cryptocurrency during an SIM swap, even after the mobile carrier had supposedly boosted security on the user’s account after an earlier attempted theft. In addition, other Silver Miller clients, who used T-Mobile, were robbed of $400,000 and $250,000.

“‘SIM swapping’ or ‘SIM hijacking’ is a growing crime in the telecommunications world that, in a few moments’ time, can allow a thief to steal millions of dollars of an unsuspecting victim’s assets with little more than a persuasive plea for assistance, a willing telecommunications carrier representative and an electronic impersonation of the victim,” according to Silver Miller in a press release. pymnts.com

SMS Phishing + Cardless ATM = Profit
Thieves are combining SMS-based phishing attacks with new “cardless” ATMs to rapidly convert phished bank account credentials into cash. Recent arrests in Ohio shed light on how this scam works.

A number of financial institutions are now offering cardless ATM transactions that allow customers to withdraw cash using nothing more than their mobile phones. But this also creates an avenue of fraud for bad guys, who can leverage phished or stolen account credentials to add a new phone number to the customer’s account and then use that added device to siphon cash from hijacked accounts at cardless ATMs. krebsonsecurity.com

Symantec Uncovers North Korean Group's ATM Attack Malware
Emptying Tens of Millions of Dollars from ATMs
Researchers from Symantec have uncovered the malware tool North Korea's infamous Lazarus Group has been using since 2016 to empty millions of dollars in cash from ATMs belonging to mostly small and midsize banks in Asia and Africa. In a report this week, the security vendor described the malware as designed to intercept and approve fraudulent ATM cash withdrawal requests before they reach a bank's underlying switch application server that processes them. darkreading.com

Microsoft's cloud wins business from Gap as another retailer shuns Amazon

Microsoft President says 2024 could become 1984 without biometrics regulation
 

e-commerce
Sponsored by The Zellman Group

Dealing with Magecart and Other Attacks
Are Companies Doing Enough to Protect Customers?
Over the last couple of months, there has been an alarming number of attacks on eCommerce and ticketing companies, with the resulting theft of customer credit card data. Those responsible for these attacks are a group of hackers called “Magecart”. In June 2018, the group attacked Ticketmaster and breached credit card data of some 40,000 customers; there followed two major attacks in September, which affected 380,000 British Airways customers and an unknown number of Newegg customers.

The modus operandi in these attacks was very similar: to inject malicious JavaScript code which could then act as a credit card skimmer. This code actively monitors events on web pages and triggers an action whenever credit card details are submitted (event hijacking). In this way, Magecart was able to intercept credit card data from customers in the checkout pages and send it to Magecart’s servers.

By understanding the methodology of these attacks, it is possible to identify prevention strategies.

The first security standard to be considered should be to add Subresource Integrity (SRI) attributes to the script elements loading the external scripts. However, SRI comes with a major pitfall: it’s notably complex to apply to dynamic code. And, as you may expect, most of these providers (like Inbenta) keep improving their services, resulting in frequent changes to JavaScript source code. Adapting SRI to match this dynamism can be a burden and, if SRI isn’t properly set up, it can block a perfectly safe third-party script, crashing the website.

The second standard is Content Security Policy (CSP).

CSP does have its limitations though and means new challenges ahead, such as being vulnerable to open-redirect attacks and requiring substantial configuration as well as maintenance; we have also seen strategies that bypass CSP altogether.

SRI and CSP should be considered, despite their drawbacks. Still, potential attacks featuring browser extensions as a vector for instance would be severely damaging to a wide number of eCommerce businesses, as SRI and CSP would be completely powerless to prevent them. cbronline.com

Counterfeit goods are a half trillion dollar industry
Here’s how QR codes and digital assets can help solve the problem of fakes
Valued at $450 billion, the counterfeit luxury goods industry continues to be a major problem for luxury brands and retailers. According to the 2018 Global Brand Counterfeit Report, the losses incurred due to online and offline counterfeiting was an estimated $98 billion, with luxury brands suffering a total loss of $30 billion because of the sale of counterfeits through the internet.

This widespread problem hasn’t just affected the financial income of luxury brands; it has also affected their consumers’ trust. The market has become alarmingly advanced, having reached major social media platforms like Facebook. The alarmingly large presence of counterfeit sales on these platforms, along with the fact that no one flags these offending sellers, makes it hard for e-commerce and social media platforms to put a stop to the problem.

The use of Digital Assets in order to keep track of all the original personal luxury goods (e.g., handbags and watches) within circulation in the fashion and luxury ecosystem will greatly benefit everyone in the system — from the luxury brands, to the retailers and resellers, and the consumers too. Digital Asset information can also be shared across e-commerce sites or secondhand retailers to increase buyer trust. Read more yahoo.com

Amazon’s virtual Christmas tree farm opens for business

American Eagle invests in hot online company
 

ORC News
Sponsored by Auror
 

Mt. Pleasant Township, PA: Small Mt. Pleasant Twp. grocer allegedly banked millions by selling stolen goods
The proprietor of a tiny Mt. Pleasant Township grocery store netted big profits for years — largely by selling Red Bull, Tide and other items shoplifted from area businesses, sometimes with the owner providing lists of what he needed, state police said. Melvin “Beanie” R. McCloy, 60, who runs McCloy’s Store at 333 Buckeye Road in the tiny village of Bridgeport, bought stolen items that people brought to his business and then resold them for profit for at least three years, according to court documents filed Thursday. A forensic analysis of McCloy’s business records showed that in 2016 McCloy “deposited $3.9 million into his business account,” investigators reported. “In the year of 2017 up to July, he deposited $1.7 million.”

Area police departments responded to a rash of retail thefts in recent years involving grocery store items, including thefts from various Walmarts and Shop ‘n Save, Giant Eagle and County Market stores, among other places in Fayette and Westmoreland counties, according to state police and court documents. Stolen items included soda, energy drinks, coffee and laundry detergent. triblive.com

Talbot County, GA: Georgia Bureau of Investigations busts $500,000 Multi-State theft Ring
A multi-state crime spree has come to an end in Talbotton. Chief Justin Johnson said his office received a tip from a law enforcement agency in Louisiana about a stolen 18 wheeler. “When you can take a half million dollars of stolen property off the streets, that’s big for any area,” said Johnson. The crime landed three people in jail after the stolen 18-wheeler with $500,000 worth of merchandise was recovered in Talbotton. Johnson describes the contents of the vehicle, “Kaboota bob cats and high dollar pressure washes.” wtvm.com

San Luis Obispo, CA: Burglars steal $8k worth of merchandise from AT&T store
Two burglars got away with 8k worth of merchandise from an AT&T store on Los Osos Valley Road in San Luis Obispo Monday night. Two suspects broke into the AT&T store and stole the merchandise and then got away in a dark colored SUV type truck. Police say one of the suspects may have been in the store earlier that day. keyt.com

Attleboro, MA: Police recovered $7,500 in stolen goods, arrest 3
Police say they recovered $7,560 worth of goods allegedly stolen from a dozen stores in Attleboro and North Attleboro and arrested three shoplifting suspects. The alleged stolen merchandise, ranging from clothing, silverware and dog food, was found in a car stopped by police around 7:15 p.m. Wednesday on South Main Street, prosecutors said Thursday. Police say the car was so filled with merchandise, they questioned how three people could fit in the vehicle. thesunchronicle.com

Tallahassee, FL: Employee steals more than $1K from Staples by using gift card
An employee at the Tallahassee Staples store was arrested after making more than $1,000 worth of fraudulent purchases with a gift card from the store. Brenden Moody, 27, was arrested by the Tallahassee Police on Wednesday. According to Staples Loss Prevention, Moody did a total of 43 fraudulent transactions that were committed by customers making a purchase for a service, such as copying or faxing. When the customer paid by debit or credit card, documents say Moody charged the amount of the service to a gift card, and would then use that gift card to make personal purchases from the store. According to receipts and transactions obtained by the agent, the fraudulent purchases committed by Moody totaled $1,249.69. An additional $365.29 that was put on a gift card was also found by the agent before Moody was able to use it. wtxl.com

Oakland Park, FL: Police searching for Armed man in attempted theft at Oakland Park Lowe’s
Police are on the hunt for a man caught trying to steal loads of items from a hardware store in Oakland Park. Surveillance cameras were rolling when the suspect filled up a shopping cart full of $2,000 worth of products at Lowe’s along Northwest 10th Terrace and West Oakland Park Boulevard, back in Sept. 22. Police said he then tried to leave through an emergency exit, but an employee managed to stop him. That’s when, police said, he showed the worker a gun and fled empty-handed. wsvn.com

Long Beach, CA: Police arrested 4 people at a Pawn Shop for felony shoplifting
Eighteen-year-old Jomar Stubbs and 17-year-olds Isiah Crockett and Marquise Buckhaulton, along with a 16-year-old, were arrested after it was determined the four stole multiple firearms and accessories from the High-Caliber Pawn Shop in Long Beach. wxxv25.com

Retail Crime News
 

Home of the Industry's Original
On the Move
 

Submit Your New Hires/Promotions
or New Position
See all the Industry Movement

Featured Job Listings
Sponsored by Delta Lock
Feature Your Job Here For 30 Days -
70% Aren't On the Boards
Post your job listing

Daily Jobs
Appearing One Day Only
View our Internet Jobs Archives here

• Trade Area AP Manager - Bloomingdale's - San Francisco, CA

• AP/LP Supervisor - Bloomingdale's - Livermore, CA

• LP Supervisor - Holt Renfrow - Toronto, Canada

• AP Manager - Kmart - Spokane, WA

• LP & Safety Manager - Lowe's - Reynoldsburg, OH

• LP & Safety Manager - Lowe's - Reidsville, NC

• Corporate Security and LP Manager -  Lowe's Canada - Etobicoke, ON, Canada

• LP Manager - Lowe's Canada - Queensborough, BC, Canada

• Organized Retail Crime Analyst - Macy's - New York, NY

• Assistant Supervisor AP/LP - Macy's - Frisco, TX

• Inventory Control Manager - Sears Hometown & Outlet - Hoffman Estates, IL

• AP Manager - Sears - Fort Worth, TX

• Senior LP Analyst - Tailored Brands - Houston, TX

• ETL Assets Protection - Target - Los Banos, CA

• AP ASM - Walmart - Simi Valley, CA

• AP ASM - Walmart - Brunswick, GA

Your Career
 

Finding a Mentor Means Looking for Your Future Self with More Experience
A mentor's know-how and experience in your field can be the resources you need to make your career grow. Your next mentor figure should give you the full picture of what you hope to achieve. Here's what you need to do to find your mentor. They've walked the steps

Why Your Co-Worker May Be Your Best Mentor
A mentor is a valuable thing if you want to climb the career ladder, but you don't have to go searching for the highest level person. Your best mentor could be right down the hallway or in the same meeting as you. Choose a colleague 

Here's Where You Can Meet Your Next Mentor
Many people approach mentoring the wrong way. It's a lot less formal than you think. Don't only look at school or at work, mentors can be anyone around you whose work and life path you admire so use these tips to look in "out-of-the-box" places and find your next mentor. Check out the blogosphere

3 Warning Signs Your Mentor Is Not Helping You
While there may be many signs that a mentor is the one for you and your career growth, there are also warning signs to watch out for that may indicate that person might not be what you hoped for. Here's what you need to watch out for. Do they challenge you?

Tip of the Day
Sponsored by Vector Security Networks
 

Every team, every effort, every program and finally every executive should have a mission with clear goals and objectives and as the new year is approaching thought should be given to new ones. Our world is changing faster than ever and so should we.

Just a Thought,
Gus

Post Your Tip or Advice!
(content subject to approval)

Upcoming Events

RLPSA Connect Nov. 15 Q4 RAM LP Committee Meeting Nov. 28 Axis Experience Center Chelmsford, MA D&D’s Live in NYC At NRF Big Show Monday, Jan. 14 The Daily’s New Year’s Kickoff Reception Honoring NRF LP Council Tuesday Evening Jan. 15 NRF Big Show Jan. 13-15 ISCPO 2019 Conference March 6-7 RILA AP Conference 2019 May 5-8 CNP Expo 2019 May 21-24 NRF Protect 2019 June 11-13 The D&D Daily 'Live at NRF Protect' June 14 RLPSA Conference 2019 Aug. 4-7

See More Events

Recruiting?
Get your job e-mailed to everyone... everyday
Post on our Featured Jobs Board!

Reach your target audience in 2018 every day!
Request our 2018 Media Kit

Not getting the Daily?
Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

SUBSCRIBE

FEEDBACK

www.downing-downing.com

Advertise With The D&D Daily

36615 Vine Street, Suite 103
Willoughby, OH 44094
440.942.0671
copyright 2009-2019
all rights reserved globally