• Monday, Jun 27, 2022
  • Last Update : 04:24 pm

Malware suspected in Bangladesh Bank heist

  • Published at 02:45 am March 12th, 2016
Malware suspected in Bangladesh Bank heist

Investigators suspect unknown hackers managed to install malware in the Bangladesh central bank's computer systems and watched, probably for weeks, how to go about withdrawing money from its US accounts, two bank officials briefed on the matter said on Friday.

More than a month after hackers breached Bangladesh Bank's systems and attempted to steal nearly $1bn from its account at the Federal Reserve Bank of New York, cyber security experts are trying to find out how the hackers got in.

FireEye Inc's Mandiant forensics division is helping investigate the cyber heist, which netted hackers more than $80m before it was uncovered.

Investigators now suspect that malware that allowed hackers to learn how to withdraw the money could have been installed several weeks before the incident, which took place between February 4 and February 5, the officials said.

Investigators suspect the attack was sophisticated, describing the use of a "zero day" and referring to an "advanced persistent threat", the officials said.

A zero day is a vulnerability in software that has yet to be identified or patched. Hackers leverage this hole to plant malware on the target computer.

Advanced persistent threat is a long-term attack on a system, where hackers remain inside the target, for months, and sometimes even years.

So far investigators have not found any proof of involvement of the central bank staff in Bangladesh, one of the officials said, but added that the probe was continuing.

Unravelling the mystery behind one of the largest cyber heists in history is crucial for security in a connected world. Understanding how it happened could help banks shore up security of their computer systems and payment networks that form the backbone of global commerce.

Security experts say the perpetrators had deep knowledge of the Bangladeshi institution's internal workings, likely gained by spying on bank workers.

Bangladesh Bank officials have said hackers appeared to have stolen their credentials for the Swift messaging system, which banks around the world use for secure financial communication.

The Fed, which provides banking services to some 250 central banks and other institutions, has said its systems were not compromised.

The Bangladesh central bank had billions of dollars in its current account, which it used for international settlements, officials have said.

The money stolen from the Bangladesh central bank made its way to the other side of the world.

Some $80m are believed to have ended in the Philippines, and further diverted to casinos and then to Hong Kong, according to bank officials.

One $20m transaction was directed to a non-profit organisation in Sri Lanka.

But the unusually large transaction for the island nation and a misspelling of the NGO's name raised red flags that helped bring the robbery to light. The transaction was blocked as was another huge payment instruction that was for between $850m-870m.

Facebook 50
blogger sharing button blogger
buffer sharing button buffer
diaspora sharing button diaspora
digg sharing button digg
douban sharing button douban
email sharing button email
evernote sharing button evernote
flipboard sharing button flipboard
pocket sharing button getpocket
github sharing button github
gmail sharing button gmail
googlebookmarks sharing button googlebookmarks
hackernews sharing button hackernews
instapaper sharing button instapaper
line sharing button line
linkedin sharing button linkedin
livejournal sharing button livejournal
mailru sharing button mailru
medium sharing button medium
meneame sharing button meneame
messenger sharing button messenger
odnoklassniki sharing button odnoklassniki
pinterest sharing button pinterest
print sharing button print
qzone sharing button qzone
reddit sharing button reddit
refind sharing button refind
renren sharing button renren
skype sharing button skype
snapchat sharing button snapchat
surfingbird sharing button surfingbird
telegram sharing button telegram
tumblr sharing button tumblr
twitter sharing button twitter
vk sharing button vk
wechat sharing button wechat
weibo sharing button weibo
whatsapp sharing button whatsapp
wordpress sharing button wordpress
xing sharing button xing
yahoomail sharing button yahoomail