How I could hack internet bank accounts of Danish largest bank in a few minutes

[BitcoinXio]

Think your banking website is secure, think again...
http://sijmen.ruwhof.net/weblog/584-how ... ew-minutes

[LiteCoinGuy]

"Wrapping up:

For at least two weeks, but probably a lot longer, very confidential customer data in the form of session cookies were leaking on Danske Bank’s web site. With these cookies it should have been possible to hijack internet banking accounts of their customers. They closed the security hole quickly, but are now in denial of it.

Update October 8:

Because of all publicity this story gets, Danske Bank now admits that their production server was in debug mode and that I saw information and cookies from other visitors (!). That’s quite a turn! Seems that media attention forces the bank to be honest. They still hold on that I couldn’t hijack banking sessions."


hrhr

[btc]

Danske Bank now admits that their production server was in debug mode and that I saw information and cookies from other visitors

:lmao: