Bangladesh Bank heist similar to Sony hack; second bank hit by malware

[Eugene]

Source: Reuters

Homepage | Fri May 13, 2016 10:25am EDT

Bangladesh Bank heist similar to Sony hack; second bank hit by malware

NEW YORK/DHAKA | BY JIM FINKLE AND SANJEEV MIGLANI

Investigators probing the cyber heist of $81 million from the Bangladesh central bank connected it on Friday to the hack at Sony Corp's film studio in 2014, while global financial network SWIFT disclosed a previously unreported attack on a commercial bank.

SWIFT did not say which commercial bank it was or whether it had lost money, but cyber-security firm BAE Systems said a Vietnamese bank, which it did not name, had been a target. It was not clear if they were referring to the same attack and there was no immediate comment from authorities in Hanoi.

SWIFT, the linchpin of the global financial system, said forensic experts believed the second case showed that the Bangladesh heist was not a single occurrence, but part of a wider campaign targeting banks.

In both cases, SWIFT said, insiders or cyber attackers had succeeded in penetrating the targeted banks' systems, obtaining user credentials and submitting fraudulent SWIFT messages that correspond with transfers of money.

[font size=1]-snip-[/font]

BAE Systems, Europe's largest weapons maker, which also has a large cyber-security business, said it had uncovered evidence linking malicious software used in the Bangladesh heist to the high-profile attack on Sony's Hollywood studio in 2014 and other cases.

[font size=1]-snip-[/font]

Read more: http://www.reuters.com/article/us-usa-fed-bangladesh-idUSKCN0Y40Z1

[scscholar]

1. When can we outlaw the use of Microsoft products in banks and government?

Even the company I work for which runs only a single Microsoft server has had it hit. Of course, no problem with the rest of the real servers. Just the damn DOS extension that is illegally sold as a server.