Cyber Attack: Online Bank Heist

FacebookXPinterestEmailEmailEmailShare

onlinebank.jpg

If someone enters a bank and hand the teller a note, demanding money, it is on the evening news. If someone does the same thing in five banks, it hits the national news. If someone does it to 400 banks online NOT A WORD. This is not a hypothesis it is a fact.

The cyber weapon used in the 400 bank robberies is called SilentBanker. Security professionals are concerned over the discovery of a banking Trojan which steals user data that impact more than 400 banks worldwide. The information that SilentBanker collects gives it the ability to reroute money to another account owned by the attackers or who they represent. This is done without the user's knowledge until he receives his bank statement.

Trojan: (short for Trojan Horse) is a piece of malicious software which appears to perform a certain action but in fact performs another. In addition, trojan horses are notorious for installing backdoor programs.

This appears to be just the beginning of the attack. The Trojan first appeared in December 2007 and continues to spread around the world. SilentBanker is more powerful that originally thought. The malicious code is so smart that if it is missing information needed to complete the transaction, the trojan enables the attackers to add extra code to the authorization page asking the user for that missing data. The rapid increase in sophistication and complexity of the latest cyber attack tools is a clear trend that is challenging the cyber security industry to stay ahead of the criminals and terrorists.

No one knows who is collecting the money, nor how they intend to use it. Could it be for drugs, terrorist attacks, purchasing of weapons or just very sophisticated bank robbers? One thing is for sure, this is just another example of our vulnerability.

PROTECTION: Make sure your anti-virus software is updated and operational. Vigilance is also a powerful defense. Check your bank statements and balances regularly and report any suspicious activity to your bank immediately.

-- Kevin Coleman


Story Continues
DefenseTech