• IBM (NYSE: IBM) continues its six-year streak as the largest provider of technology products and services to the financial services industry;
  
  


• 10 of this year’s Top 25 companies have headquarters outside of North America, underscoring the global nature of solutions providers to the financial services industry; and
  
  


• Two of the Top 25 companies are from India, (Wipro and, new to the Enterprise 25 this year, HCL Technologies).
  
  

1. IBM, Armonk, N.Y., USA


2. Hewlett Packard, Palo Alto, Calif., USA


3. Dell, Inc., Round Rock, Texas, USA


4. Fujitsu Limited, Tokyo, Japan


5. Microsoft, Redmond, Wash., USA


6. Cisco Systems, Inc., San Jose, Calif., USA


7. Accenture, Bermuda, N.Y., USA


8. Hitachi, Tokyo, Japan


9. EMC, Hopkinton, Mass., USA


10. Intel, Santa Clara, Calif., USA


11. Sun Microsystems, Inc., Santa Clara, Calif., USA


12. Oracle Corporation, Redwood Shores, Calif., USA


13. Computer Sciences (CSC), Falls Church, Va., USA


14. Thomson Reuters, New York, N.Y., USA


15. Capgemini, Paris, France


16. ATOS Origin S.A., Paris, France


17. Unisys, Blue Bell, Penn., USA


18. CGI Group, Montreal, QC, Canada


19. Wipro, Bangalore, Karnataka, India


20. Siemens, Munich, Germany


21. Deloitte & Touche Tohmatsu, New York, N.Y., USA


22. Logica CMG plc, London, UK


23. SAP AG, Walldorf, Germany


24. Reed Elsevier, London, UK


25. HCL Technologies, Noida, UP, India

• Best Buy will offer $20 cash-back on purchases of 100 dollars or more when you pay with PayPal between November 10^th and November 16^th.


• Southwest Airlines, Omaha Steaks and Smart Bargains will offer up to 20 percent savings on all PayPal purchases.

• Walmart.com will offer free Site to Store shipping.


• Beauty.com will offer PayPal customers free shipping from November 3^rd through 9^th.


• Zappos.com will offer free shipping both ways on shoes and free overnight shipping on clothing from November 10^th through 16^th.

W32.Silon Circumvents Transaction Authentication Systems to Commit Financial Fraud



NEW YORK, Oct. 28, 2009 - PIN Payments News Blog - Trusteer, the customer protection company for online businesses, today issued a security advisory on a new Trojan called W32.Silon that bypasses security tokens, banking card readers and uses a two pronged payload to steal login information and commit online financial fraud. The Trusteer Rapport browser security service has blocked repeated attempts in-the-wild by the W32.Silon Trojan to compromise consumer internet banking accounts. Findings gathered from a sample of the new malware are available in a report that explains its functionality, as well as how to detect and remove W32.Silon. The report is available at http://www.trusteer.com/webform/w32silon-malware-analysis.



W32.Silon is new malware variant that intercepts Internet Explorer web browser sessions, and has been associated with fraud incidents at several large banks. Trusteer retrieved and analyzed a sample of this two headed Trojan which is designed to steal generic login information and commit bank-specific fraud.



To steal user credentials, W32.Silon performs its initial attack when a user initiates a web login session and enters their username and password. The malware intercepts the login POST request, encrypts the requested data, and sends it to a command & control (C&C) server.

When it targets users of online banking applications that are protected by transaction authentication devices such as tokens or banking card readers, W32.Silon waits until the user has logged on and then injects dynamic html code into the login flow between the user and the bank’s web server. First, the malware presents authentic looking web pages that appear to be from the bank asking the user to employ their transaction authentication device. Next, the user is asked to enter information from the device into the webpage. This information is then used by the criminals to execute fraudulent transactions on behalf of the user.

“This new Trojan illustrates how advanced malware writers have become in their ability to dynamically execute multiple, bank-specific attacks with a single piece of software,” said Amit Klein, CTO and chief researcher at Trusteer. “The level of sophistication built-into W32.Silon is concerning, as is its focus on circumventing strong authentication systems like card and PIN readers. We have put all of our banking customers on alert, and are attempting to get the word out with this advisory.”



About Rapport



Rapport from Trusteer is a lightweight browser plug-in plus security service that prevents criminals from tampering with a user’s browser and protects against man-in-the-browser, man-in-the-middle, and phishing attacks. When users browse to sensitive websites such as internet banking, Webmail, or online payment pages, the Rapport plug-in immediately locks down the browser and prevents any unauthorized access to web pages and confidential information that flow through the browser. Rapport is available for download here. Trusteer also offers in-the-cloud reporting services. When unauthorized access attempts are detected by Rapport, these are analyzed by fraud experts who provide actionable intelligence to financial institutions.



About Trusteer



Trusteer enables online businesses to secure communications with their customers over the Internet, and protect personally identifiable information (PII) and transactions from a user's keyboard into the company's Web site. Trusteer's flagship product, Rapport, allows online banks, brokerages, healthcare providers, and retailers to protect their customers from identity theft and financial fraud. Trusteer’s services are used by more than 30 financial institutions in North America and Europe, and by over 3 million users. Trusteer is a privately held corporation led by former executives from Cyota/RSA Security, Imperva, and NetScreen/Juniper. For more information visit www.trusteer.com.

Amazon sidelines user names and passwords with 'PayPhrase' for online payment



Finextra: Amazon has moved to simplify the online checkout process with a feature that lets customers complete purchases by typing in a short, unique phrase and PIN.



Customers who store credit card numbers and shipping addresses with Amazon can choose to have that information represented by a "PayPhrase" and PIN. When making a purchase, they enter their own customised phrase - such as 'Knick Knack', 'Home Sweet Home', or 'Jake's Allowance' - and PIN and are shown an order confirmation before checking out.

Amazon says the system is easy and secure because shoppers do not need to type in their usernames and passwords or enter their payment information. Customers can adopt multiple PayPhrases to map against multiple shipping instructions and card accounts.



Editor's Note: Six of One...Half a Dozen of the Other...



Continue Reading at Finextra

Market leaders consolidate their activities to further develop best of breed solutions



New York, N.Y. – 29 October 2009 - PIN Payments News Blog -  ACI Worldwide, Inc. (Nasdaq: ACIW), a leading international provider of electronic payments software and solutions, today announced that it has entered into an exclusive agreement with Bell ID for ACI to license Bell ID’s solutions for smart card management to financial markets and retailers around the world. As part of this agreement, ACI will market and license the ANDiS suite of products, which will continue to be developed by Bell ID from its Dutch headquarters.



The Bell ID products include the ANDiS Card and Application Management System (CAMS) which supports all of the lifecycle phases of smart card management, including embossing file import, data preparation, personalization, EMV script management, and central or in-branch issuance. The ANDiS Key Management System (or KMS) allows users to define, maintain, and store cryptographic keys.

The cooperation will fund significant product enhancements including interoperability of the ANDiS suite with ACI’s Agile Payments Solution framework, to provide a seamless end-to-end solution for the payments industry.