Three banks hit by cyberattacks

guest · Jun 22, 2019

Three banks hit by cyberattacks
June 22, 2019
https://www.thedailystar.net/frontpage/news/three-banks-hit-cyberattacks-1760629

At least three local private banks suffered major cyberattacks last month, raising concern about the robustness of their security systems against a growing threat of scammers.

Of the three, Dutch Bangla Bank Limited (DBBL) was the biggest victim, losing as much as $3 million [...]
Two other banks -- NCC Bank and Prime Bank -- also faced cyberattacks, but they claimed they were able to avert financial losses.
This was the biggest cyberattack after hackers made off with $81 million from Bangladesh Bank’s account with the Federal Reserve Bank of New York around three and a half years ago.
Click to expand...

Usually, hackers use malware to steal customer data from a bank’s server and then use that information to clone credit and debit cards.

But in the case of the DBBL, hackers planted a malware in the bank’s switch (card management system) around three months ago and made a perfect replica of the switch, which the bank could not detect.
The DBBL has the largest network of cash machines and the highest number of debit cards in circulation, but it does not have the PCI DSS certification.

Banks are not making enough investments to strengthen their IT security and human resources, and this is one of the key reasons for vulnerabilities in their cybersecurity systems, said the head of the IT department of a leading private bank.
Click to expand...

guest · Jul 3, 2019

'Silence' hackers hit banks in Bangladesh, India, Sri Lanka, and Kyrgyzstan
July 3, 2019
https://www.zdnet.com/article/silen...in-bangladesh-india-sri-lanka-and-kyrgyzstan/

A group of hackers specialized in attacking banks has hit again, and this time they've breached four targets in Asia, respectively in Bangladesh, India, Sri Lanka, and Kyrgyzstan, security researchers from Group-IB have told ZDNet.
SILENCE GROUP EXPANDS BEYOND EUROPE
In a report shared with ZDNet prior to publication, Group-IB tied the Dutch Bangla Bank incident to a group of hackers known as "Silence."
According to Rustam Mirkasymov, Head of Dynamic Analysis of Malicious Code at Group-IB, this is the first time the group has ventured into Asia.
DUTCH BANGLA BANK HACK TIED TO SILENCE INFRASTRUCTURE
According to the researcher, the group appears to have deployed the eponymously named Silence malware on the bank's network, with modules for running malicious commands on infected hosts and setting up proxy servers to disguise malicious traffic.
TWO OTHER BANGLADESH BANKS ALSO HIT
Bangladesh local media reported that two other local banks -- NCC Bank and Prime Bank -- also faced similar issues as Dutch Bangla Bank, but they managed to avert financial losses. It is unclear if Silence was involved in those attacks as well.
Click to expand...

guest · Jan 13, 2020

Russian hacking group targets Sub-Saharan Africa banks
January 13, 2020
https://www.itweb.co.za/content/8OKdWqDEx98vbznQ

Researchers from Kaspersky Lab have reported thousands of notifications of attacks on major banks in Sub-Saharan Africa.
The malware used in the attacks indicates the threat actor is most likely to be the notorious Silence hacking group, infamous for the theft of millions of dollars from banks around the world.

The attacks have been attributed to this group because the malware used in this latest incident was previously used solely in its operations. Moreover, the malware is in Russian, although the threat actor attempted to slightly cover this fact by typing Russian words using the English keyboard layout.
The first attacks were detected in the first week of January and indicated the threat actor is about to begin the final stage of operation and cash out the funds. The attacks are ongoing and persist in targeting large banks in several Sub-Saharan Africa countries.
Click to expand...

Sergey Golovanov, security researcher at Kaspersky, says the Silence group has been active over the past few years, and lives up to its name.

“Their operations require an extensive period of silent monitoring, with rapid and coordinated thefts. We noticed a growing interest of this actor group in banking organisations in 2017, and since that time, the group would constantly develop, expanding to new regions and updating their social engineering scheme.”
Click to expand...

Log in or Sign up

Three banks hit by cyberattacks

guest Guest

guest Guest

guest Guest

Log in or Sign up

Three banks hit by cyberattacks

guest Guest

guest Guest

guest Guest

Useful Searches