Connect with us

World

Bangladesh Bank exposed to hackers by cheap switches, no firewall

Legacy Phuket Gazette

Published 

 on 

Bangladesh Bank exposed to hackers by cheap switches, no firewall | Thaiger

PHUKET MEDIA WATCH

– World news selected by Gazette editors for Phuket’s international community

Bangladesh Bank exposed to hackers by cheap switches, no firewall
Phuket Gazette / Reuters


DHAKA: Bangladesh’s central bank was vulnerable to hackers because it did not have a firewall and used second-hand, $10 switches to network computers connected to the SWIFT global payment network, an investigator into one of the world’s biggest cyber heists said.

The shortcomings made it easier for hackers to break into the Bangladesh Bank system earlier this year and attempt to siphon off nearly $1 billion using the bank’s SWIFT credentials, said Mohammad Shah Alam, head of the Forensic Training Institute of the Bangladesh police’s criminal investigation department.

“It could be difficult to hack if there was a firewall,” Alam said in an interview.

The lack of sophisticated switches, which can cost several hundred dollars or more, also means it is difficult for investigators to figure out what the hackers did and where they might have been based, he added.

Experts in bank security said that the findings described by Alam were disturbing.

“You are talking about an organization that has access to billions of dollars and they are not taking even the most basic security precautions,” said Jeff Wichman, a consultant with cyber firm Optiv.

Tom Kellermann, a former member of the World Bank security team, said that the security shortcomings described by Alam were “egregious,” and that he believed there were “a handful” of central banks in developing countries that were equally insecure.

Kellermann, now chief executive of investment firm Strategic Cyber Ventures LLC, said that some banks fail to adequately protect their networks because they focus security budgets on physically defending their facilities.

POLICE BLAME BANK, SWIFT

Cyber criminals broke into Bangladesh Bank’s system and in early February tried to make fraudulent transfers totaling $951 million from its account at the Federal Reserve Bank of New York.

Most of the payments were blocked, but $81 million was routed to accounts in the Philippines and diverted to casinos there. Most of those funds remain missing.

The police believe that both the bank and SWIFT should take the blame for the oversight, Alam said in an interview.

“It was their responsibility to point it out but we haven’t found any evidence that they advised before the heist,” he said, referring to SWIFT.

A spokeswoman for Brussels-based SWIFT declined comment.

SWIFT has previously said the attack was related to an internal operational issue at Bangladesh Bank and that SWIFT’s core messaging services were not compromised.

A spokesman for Bangladesh Bank said SWIFT officials advised the bank to upgrade the switches only when their system engineers from Malaysia visited after the heist.

“There might have been a deficiency in the system in the SWIFT room,” said the spokesman, Subhankar Saha, confirming that the switch was old and needed to be upgraded.

“Two (SWIFT) engineers came and visited the bank after the heist and suggested to upgrade the system,” Saha said.

GLOBAL WHODUNIT

The heist’s masterminds have yet to be identified.

Bangladesh police said earlier this week they had identified 20 foreigners involved in the heist but they appear to be people who received some of the payments, rather than those who initially stole the money.

Bangladesh Bank has about 5,000 computers used by officials in different departments, Alam said.

The SWIFT room is roughly 12 feet by 8 feet, a window-less office located on the eight floor of the bank’s annex building in Dhaka. There are four servers and four monitors in the room.

All transactions from the previous day are automatically printed on a printer in the room.

The SWIFT facility should have been walled off from the rest of the network. That could have been done if the bank had used the more expensive, “managed” switches, which allow engineers to create separate networks, said Alam, whose institute includes a cyber-crime division.

Moreover, considering the importance of the room, the bank should have deployed staff to monitor activity round the clock, including weekends and holidays, he said.

— Phuket Gazette Editors

 

Want more from the Thaiger family?

📱 Download our app on Android or iOS for instant updates on your mobile
📧 Subscribe to our daily email newsletter
👍 Like/Follow us on Facebook
🔔 Subscribe to or Join our YouTube channel for daily video updates

image

Join the conversation and have your say on Thailand news published on The Thaiger.

Thaiger Talk is our new Thaiger Community where you can join the discussion on everything happening in Thailand right now.

Please note that articles are not posted to the forum instantly and can take up to 20 min before being visible. Click for more information and the Thaiger Talk Guidelines.



Find more SE Asian News courtesy of Thaiger.

Broke? Find employment in Southeast Asia with JobCute Thailand. Rich? Invest in real estate across Asia with FazWaz Property Group. Even book medical procedures worldwide with MyMediTravel, all powered by DB Ventures.

Archiving articles from the Phuket Gazette circa 1998 - 2017. View the Phuket Gazette online archive and Digital Gazette PDF Prints.

Follow Thaiger by email:

Myanmar4 hours ago

Burmese military media outlets say ethnic army killed 25 workers

Thailand6 hours ago

PM Prayut Chan-o-cha says drug suppression should to be a national priority

Thailand7 hours ago

Purchases of fancy street lamps being investigated for possible corruption

Phuket Sandbox July 1st

days
hours
minutes
seconds

Thaiger is getting behind local businesses for the restart of tourism in July - up to 50% discounts across all advertising packages in June!

Sponsored by image

Thailand8 hours ago

Thailand News Today | BKK parks re-open… nearly, tropical storm, airport security upgrade | June 14

Thailand8 hours ago

Missing fisherman’s body found in sea off Nakhon Si Thammarat

Coronavirus (Covid-19)8 hours ago

CCSA: We’re out of vaccines

Coronavirus (Covid-19)9 hours ago

Ayutthaya hospital to test all staff for Covid after 18 test positive

Thailand9 hours ago

13 teenagers arrested in Chon Buri for partying, gathering

Crime9 hours ago

Crime Suppression Division seizes dozens of illegal firearms in a series of raids

Crime10 hours ago

Marijuana valued at 10 million baht seized in Nakhon Phanom, 2 arrested

Coronavirus (Covid-19)11 hours ago

Monday Covid Update: 3,355 new cases, provincial totals

Coronavirus (Covid-19)11 hours ago

Almost 100% of teachers and staff vaccinated in Bangkok

Thailand12 hours ago

Almost 8 million register for stimulus scheme, app briefly goes down

Best of12 hours ago

Top 5 best temples in Bangkok

Thailand12 hours ago

Good Morning Thailand | What’s happening in Pattaya, Phuket sandbox, reopening for tourism

Thailand3 months ago

Thailand News Today | Thai Airways in rehab, All go for Songkran | March 4

Tourism3 months ago

Phuket’s nightlife. Yes, bars and clubs are still open | VIDEO

Phuket3 months ago

Thailand News Today | Covid passport talks, Thai Airways heads to court | March 2

Tourism4 months ago

Phuket Thai food treats you need to try | VIDEO

Thailand4 months ago

Thailand News Today | Bars, pubs and restaurants ‘sort of’ back to normal | Feb 23

Tourism4 months ago

In search of Cat & Dog Cafés in Phuket Town | VIDEO

Thailand5 months ago

Thailand News Today | Gambling crackdown, Seafood market to reopen, Vlogger challenge | Jan 21

Thailand5 months ago

Thailand News Today | Covid testing for visas, Business impact, Vaccine approval | January 19

Thailand5 months ago

Thailand News Today | Weekend Bangkok bombs, Thailand fires, Covid update | January 18

Thailand5 months ago

Thailand News Today | Stray car on runway, Indonesian quake, 300 baht tourist fee | January 15

Thailand5 months ago

Thailand News Today | Governor off respirator, sex-trafficking arrest, condo prices falling | January 14

Thailand5 months ago

Thailand News Today | Chinese vaccine, Thailand ‘drug hub’, Covid update | January 13

Thailand5 months ago

Thailand News Today | Bangkok may ease restrictions, Phuket bar curfew, Vaccine roll out | January 12

Thailand5 months ago

Thailand News Today | Covid latest, Cockfights closed down, Bryde’s Whale beached | January 11

Thailand5 months ago

Thailand News Today | Southern floods, Face mask fines, Thai Air Asia woes | January 8

Trending