欧洲支付理事会：2024年支付威胁与欺诈趋势报告 英文版.pdfVIP

Report

2024PaymentThreatsandFraudTrends

EPC162-24

Version1.0

Dateissued:22/11/2024

2024PaymentThreatsand

FraudTrendsReport

EPC162-24/Version1.0/Dateissued:22November2024

Public

©2024CopyrightEuropeanPaymentsCouncil(EPC)AISBL:

Thisdocumentispublicandmaybecopiedorotherwisedistributedprovidedattributionismadeandthetextisnotused

www.epc-cep.eu1/72

directlyasasourceofprofit

Report

2024PaymentThreatsandFraudTrends

EPC162-24

Version1.0

Dateissued:22/11/2024

Abstract

Thisneweditionofthethreatstrendsreportreflectstherecentdevelopmentsconcerningsecurity

threatsandfraudinthepaymentslandscapeoverthepastyear.

www.epc-cep.eu2/72

Report2024PaymentsThreatsandFraudTrends

EPC162-24/Version1.0

TableofContents

ExecutiveSummary5

Aboutthisdocument5

Conclusions5

1DocumentInformation9

1.1ScopeandObjectives9

1.2Audience9

1.3Contributors9

1.4References9

1.5DefinitionsandAbbreviations10

2FocusonRecentAttackTrends15

3PaymentThreatsandFraudLandscape17

3.1FraudTechniques17

3.1.1SocialEngineering17

3.1.2Malware19

3.1.3AdvancedPersistentThreats(APT)23

3.1.4DistributedDenialofService(DDoS)27

3.1.5Botnets32

3.1.6Third-partycompromise,supplychainattacksandoutages36

3.1.7MonetisationChannels39

3.2FraudperPayment-RelevantProc