fighting cyberattacks cybersecurity richard carberry

When you hear about a billion dollar bank heist, maybe you picture a scene from an old Western, with masked robbers shooting guns in the air and carrying off duffel bags of cash. Or perhaps it’s more like “Ocean’s Eleven,” with slick con men using stolen access codes and EMP devices to access the vault, while a trained gymnast does cartwheels to avoid laser beams. Either way, they used old technology.

Sadly, a byproduct of today’s high-tech world is that stealing money is becoming easier, as evidenced by the Carbanak heist earlier this year. In that one attack, 100 financial institutions in 30 different countries were robbed of an estimated $1 billion. It didn’t take guns, it didn’t take drills and it didn’t take acrobatics. All it took was unaware employees who opened attachments in malicious emails.

The emails were sent as part of a spear phishing campaign directed at financial institution employees, in which thieves used information they’d collected from social engineering to create a legitimate looking message. The emails included an attachment containing malware that installed itself on the victim’s computer. Once in control of the infected machine, the robbers explored the bank’s internal networks and Internet banking platforms, learning how to access financial systems with key loggers and screenshots. Then it simply became a matter of draining funds by setting up fake accounts, executing a transfer or sending a remote command to an ATM machine.

Complete your profile to continue reading and get FREE access to CUTimes.com, part of your ALM digital membership.

Your access to unlimited CUTimes.com content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Critical CUTimes.com information including comprehensive product and service provider listings via the Marketplace Directory, CU Careers, resources from industry leaders, webcasts, and breaking news, analysis and more with our informative Newsletters.
  • Exclusive discounts on ALM and CU Times events.
  • Access to other award-winning ALM websites including Law.com and GlobeSt.com.

Already have an account?


NOT FOR REPRINT

© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Credit Union Times

Join Credit Union Times

Don’t miss crucial strategic and tactical information necessary to run your institution and better serve your members. Join Credit Union Times now!

  • Free unlimited access to Credit Union Times' trusted and independent team of experts for extensive industry news, conference coverage, people features, statistical analysis, and regulation and technology updates.
  • Exclusive discounts on ALM and Credit Union Times events.
  • Access to other award-winning ALM websites including TreasuryandRisk.com and Law.com.

Already have an account? Sign In Now
Join Credit Union Times

Copyright © 2024 ALM Global, LLC. All Rights Reserved.