$1 BILLION dollar cyber-heist

[arnoudk]

Hackers managed to infiltrate the Central Bank of Bangladesh. They were able to do this, because the central bank had no firewall (!) and had used a second hand $10 router to connect the banks systems to the SWIFT network (!!).

The hackers then managed to move $100 million by sending a valid SWIFT transaction. How much of this money can be recovered is currently unclear.

Then, the hackers tried to move another $850 million. They ALMOST succeeded. They made a spelling mistake in the account name, and spelled Foundation as Fandation. This caused the transaction to be triggered for inspection, and Deutsche Bank investigated when it was one of the transferring banks.

If not for this spelling error, the hackers would have stolen just shy of 1 BILLION dollars.

Let's replace SWIFT by something more secure - bitcoin anyone?

[bitkilo]

Have you got a link to this story?

[arnoudk]

Have you got a link to this story?

Dutch: http://www.nu.nl/internet/4251266/goedk ... elijk.html

Via Google Translate:

Cheap routers made giant digital bank robbery possible
Photo: Thinkstock
Published: April 22 2016 14:50 Last Updated: April 22 2016 18:20

The central bank of Bangladesh almost fell prey to one of the largest digital bank robberies ever because they had no firewall and used cheap used routers.

The computers of the central bank of Bangladesh capital Dhaka were used switches of $ 10 associated with the international payment system SWIFT, says a security researcher.

SWIFT (Society for Worldwide Interbank Financial Telecommunication) is an international partnership between banks that cross-border payment traffic does run smoothly.

The vulnerabilities in the systems, hackers were able to hack earlier this year in the systems of the bank, in which an attempt was made nearly $ 1 billion to lock away.
spelling mistake

This ultimately failed because the hackers made a spelling error. Instead of 'foundation' wrote the hackers 'fandation', making a routine investigation was started.

"It would hack more difficult as there would be using a firewall," says lead researcher Shah Alam of the Bangladesh police now.

The lack of reliable, safe equipment is now difficult for investigators to trace the hackers have done exactly, and where they are located. Such devices cost several hundred euros.
traceless

Although most attempts by hackers to lock failed money away, is as much as $ 81 million diverted via Philippine bank accounts to casinos. The bulk of that amount is still missing.

According to the Bangladeshi police affects both the central bank and the operators of payment system SWIFT blame. "It was their responsibility to assign it to, but we have no evidence that they have given prior advice to the bank robbery," said Alam on SWIFT.

The Brussels office of the payment network declined to comment. According gave the central bank of Bangladesh to replace only advice his equipment when it was inspected after the bank robbery by SWIFT employees.

And http://www.bloomberg.com/news/articles/ ... la-casinos

And http://qz.com/639369/a-1-billion-cyber- ... ing-error/