Hackers' Typo Foils Their $1 Billion Wire Transfer HeistHackers' Typo Foils Their $1 Billion Wire Transfer Heist
Stolen credentials are no use without good spelling.
March 10, 2016
Let this be a lesson in the importance of good editors. Attackers successfully breached Bangladesh Bank's systems and stole its credentials for payment transfers, yet the small typo they made in a wire transfer request ultimately undid their efforts to steal $1 billion.
As Reuters reports today, after obtaining the credentials, attackers "bombarded the Federal Reserve Bank of New York with nearly three dozen requests to move money from the Bangladesh Bank's account there to entities in the Philippines and Sri Lanka."
The first four transfers, totaling about $81 million, went through, but the fifth time:
Hackers misspelled "foundation" in the NGO's name as "fandation," prompting a routing bank, Deutsche Bank, to seek clarification from the Bangladesh central bank, which stopped the transaction, one of the officials said.
This, plus the number and size of the transfers being sent to private entities instead of other banks raised the suspicions of The Fed. Although the initial $80 million was not recovered, between $850 to $870 million of attempted transactions were stopped.
Read more at Reuters.
About the Author(s)
You May Also Like
Hacking Your Digital Identity: How Cybercriminals Can and Will Get Around Your Authentication MethodsOct 26, 2023
Modern Supply Chain Security: Integrated, Interconnected, and Context-DrivenNov 06, 2023
How to Combat the Latest Cloud Security ThreatsNov 06, 2023
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
SecOps & DevSecOps in the CloudNov 06, 2023
Passwords Are Passe: Next Gen Authentication Addresses Today's Threats
How to Deploy Zero Trust for Remote Workforce Security
What Ransomware Groups Look for in Enterprise Victims
How to Use Threat Intelligence to Mitigate Third-Party Risk
Securing the Remote Worker: How to Mitigate Off-Site Cyberattacks