Banking system vulnerable to cybercrime

Quick math question: What's the difference between $81 million and $1 Billion?
Answer: the letters "o" and "u".

Those letters are all that saved the Bangladesh central bank, and by extension the New York Federal Reserve Bank, from ruin.

The hackers breached Bangladesh Bank's systems and stole its credentials for payment transfers, two senior officials at the bank said. They then bombarded the Federal Reserve Bank of New York with nearly three dozen requests to move money from the Bangladesh Bank's account there to entities in the Philippines and Sri Lanka, the officials said.
Four requests to transfer a total of about $81 million to the Philippines went through, but a fifth, for $20 million, to a Sri Lankan non-profit organisation was held up because the hackers misspelled the name of the NGO, Shalika Foundation.
Hackers misspelled "foundation" in the NGO's name as "fandation", prompting a routing bank, Deutsche Bank, to seek clarification from the Bangladesh central bank, which stopped the transaction, one of the officials said.

More than $800 million in transactions got halted because of Deutsche Bank's quick thinking.
Bangladesh is now suing the NYFRB for their lack of due diligence.

If it wasn't for that typo, this would have been one of the largest bank heists in history. The largest bank heist in history happened just last year.

A multinational gang of cybercriminals infiltrated more than 100 banks across 30 countries and made off with up to one billion dollars over a period of roughly two years, Kaspersky Lab said on Saturday.

If authorities ever captured the Carbanak Gang, I haven't seen it. However, I have seen this.

Kaspersky has confirmed the return of Carbanak as Carbanak 2.0 and uncovered two more groups working in the same style: Metel and GCMAN.

The Carbanak heist happened around the same time that the largest bank security breach in history happened at JPMogan Chase, when 100 million customer accounts were hacked.

This is the point of the essay where I tell you how big the problem of cybercrime is.

Cybercrime is:

more profitable than the drug trade
bigger than Apple, Google, and Facebook combined
a bigger danger than al-Qaeda

Napolitano, in a speech May 30 to business leaders and government officials, said that besides "al Qaeda and al Qaeda-related groups," cybercrime is, "the greatest threat and actual activity that we have seen aimed at the west and at the United States. Unfortunately, it is a growth arena."

Does that sound like an exaggeration? Think again. Or better yet, ask Ukraine.

In the run-up to holidays last month, two power distribution companies in Ukraine said that hackers had hijacked their systems to cut power to more than 80,000 people. The intruders also sabotaged operator workstations on their way out the digital door to make it harder to restore electricity to customers. The lights came back on in three hours in most cases, but because the hackers had sabotaged management systems, workers had to travel to substations to manually close breakers the hackers had remotely opened.
...
In January, Ukrainian media said the perpetrators hadn’t just cut power; they had also caused monitoring stations at Prykarpattyaoblenergo to go “suddenly blind.” Details are scarce, but the attackers likely froze data on screens, preventing them from updating as conditions changed, making operators believe power was still flowing when it wasn’t.
To prolong the outage, they also evidently launched a telephone denial-of-service attack against the utility’s call center to prevent customers from reporting the outage.

Cybercrime cost the global economy $445 Billion in 2014 and the percentage of companies reporting losses of more than $1 million as a result of cybercrime attacks doubled since 2014.

Despite the rise in the number of businesses affected by cybercrime, however, the increased number may still be smaller than the true figure.
“The insidious nature of this threat is such that of the 56% who say they are not victims, many have likely been compromised without knowing it,” says the report.

In just one ransomeware attack in 2015, the group behind Cryptowall 3, reportedly reaped $325 million in profits from victims.

Despite this explosion in cybercrime, police generally ignore complaints about it.

Police are only investigating one in 100 cybercrime fraud cases, an investigation has revealed.
In the past year there have been 3.2million frauds, but these have resulted in fewer than 9,000 convictions.
Experts have warned the situation has given fraudsters 'virtual impunity', the investigation by the The Times revealed.
Tags: 
Share
up
0 users have voted.

Comments

Thanks from Divine Order and myself for all the posts we have read from you. So very informative, scary and maddening all in one! Agree that cyber crime is one that more attention from the powers that be.

up
0 users have voted.

Life is what you make it, so make it something worthwhile.

This ain't no dress rehearsal!

Thanks from Divine Order and myself for all the posts we have read from you. So very informative, scary and maddening all in one! Agree that cyber crime is one that more attention from the powers that be.

up
0 users have voted.

Life is what you make it, so make it something worthwhile.

This ain't no dress rehearsal!

PubliusVergil's picture

The news of bank cyber heists keeps coming. Many in the I.T. community prognosticated about this years ago, yet the system keeps playing H-1b games when the threat is clearly nationalistic in nature.

up
0 users have voted.
jiordan's picture

because they are always fascinating, informative posts that break complex issues down for me into understandable chunks. If I've never thanked you, my apologies, I'm grateful for your writing. When it comes to the economy, you've been my go-to source for a while now.

However, would you please stop scaring the crap out of me? Smile

On second thought, don't. As a nation we're already too complacent, and its easy to forget these problems exist without someone reminding us on a regular basis.

up
0 users have voted.

I try to never miss anything you've written. And

up
0 users have voted.