Connect with us

World

How a hacker’s typo helped stop a billion dollar bank heist

Legacy Phuket Gazette

Published 

 on 

How a hacker’s typo helped stop a billion dollar bank heist | Thaiger

PHUKET MEDIA WATCH

– World news selected by Gazette editors for Phuket’s international community

How a hacker’s typo helped stop a billion dollar bank heist
Phuket Gazette / Reuters


DHAKA: A spelling mistake in an online bank transfer instruction helped prevent a nearly $1 billion heist last month involving the Bangladesh central bank and the New York Fed, banking officials said.

Unknown hackers still managed to get away with about $80 million, one of the largest known bank thefts in history.

The hackers breached Bangladesh Bank’s systems and stole its credentials for payment transfers, two senior officials at the bank said. They then bombarded the Federal Reserve Bank of New York with nearly three dozen requests to move money from the Bangladesh Bank’s account there to entities in the Philippines and Sri Lanka, the officials said.

Four requests to transfer a total of about $81 million to the Philippines went through, but a fifth, for $20 million, to a Sri Lankan non-profit organisation was held up because the hackers misspelled the name of the NGO, Shalika Foundation.

Hackers misspelled “foundation” in the NGO’s name as “fandation”, prompting a routing bank, Deutsche Bank, to seek clarification from the Bangladesh central bank, which stopped the transaction, one of the officials said.

There is no NGO under the name of Shalika Foundation in the list of registered Sri Lankan non-profits. Reuters could not immediately find contact information for the organization.

Deutsche Bank declined to comment.

At the same time, the unusually high number of payment instructions and the transfer requests to private entities – as opposed to other banks – raised suspicions at the Fed, which also alerted the Bangladeshis, the officials said.

The details of how the hacking came to light and was stopped before it did more damage have not been previously reported. Bangladesh Bank has billions of dollars in a current account with the Fed, which it uses for international settlements.

The transactions that were stopped totalled $850-$870 million, one of the officials said.

Last year, Russian computer security company Kaspersky Lab said a multinational gang of cyber criminals had stolen as much as $1 billion from as many as 100 financial institutions around the world in about two years.

Iraqi dictator Saddam Hussein’s son Qusay took $1 billion from Iraq’s central bank on the orders of his father on the day before coalition forces began bombing the country in 2003, American and Iraqi officials have said. In 2007, guards at the Dar Es Salaam bank in Baghdad made off with $282 million.

MONEY RECOVERED

Bangladesh Bank has said it has recovered some of the money that was stolen, and is working with anti-money laundering authorities in the Philippines to try to recover the rest.

A bank spokesman could not be reached for comment late on Thursday.

The recovered funds refer to the Sri Lanka transfer, which was stopped, one of the officials said.

Initially, the Sri Lankan transaction reached Pan Asia Banking Corp, which went back to Deutsche Bank for more verification because of the unusually large size of the payment, a Pan Asia official said. “The transaction was too large for a country like us,” the official said. “Then (Deutsche) came back and said it was a suspect transaction.” A Pan Asia spokesman could not immediately be reached for comment.

The dizzying, global reach of the heist underscores the growing threat of cyber crime and how hackers can find weak links in even the most secure computer networks.

More than a month after the attack, Bangladeshi officials are scrambling to trace the money, shore up security and identify weaknesses in their systems. They said there is little hope of ever catching the hackers, and it could take months before the money is recovered, if at all.

Security experts said the perpetrators had deep knowledge of the Bangladeshi institution’s internal workings, likely gained by spying on bank workers.

The Bangladesh government, meanwhile, is blaming the Fed for not stopping the transactions earlier. Finance Minister Abul Maal Abdul Muhith told reporters on Tuesday that the country may resort to suing the Fed to recover the money.

“The Fed must take responsibility,” he said.

The New York Fed has said its systems were not breached, and it has been working with the Bangladesh central bank since the incident occurred.

The hacking of Bangladesh Bank happened sometime between Feb. 4-5, over the Bangladeshi weekend, which falls on a Friday, the officials said. The bank’s offices were shut.

Initially, the central bank was not sure if its system had been breached, but cyber security experts brought in to investigate found hacker “footprints” that suggested the system had been compromised, the officials said.

These experts could also tell that the attack originated from outside Bangladesh, they said, adding the bank is looking into how they got into the system and an internal investigation is ongoing.

The bank suspects money sent to the Philippines was further diverted to casinos there, the officials said.

The Philippine Amusement and Gaming Corp, which oversees the gaming industry, said it has launched an investigation. The country’s anti-money laundering authority is also working on the case.

— Phuket Gazette Editors

 

Want more from the Thaiger family?

📱 Download our app on Android or iOS for instant updates on your mobile
📝️ Join the conversation on Thaiger Talk - discuss news & life in our Thailand forums
📧 Subscribe to our daily email newsletter
👍 Like/Follow us on Facebook
🔔 Subscribe to or Join our YouTube channel for daily video updates

image

Join the conversation and have your say on Thailand news published on The Thaiger.

Thaiger Talk is our new Thaiger Community where you can join the discussion on everything happening in Thailand right now.

Please note that articles are not posted to the forum instantly and can take up to 20 min before being visible. Click for more information and the Thaiger Talk Guidelines.



Find more SE Asian News courtesy of Thaiger.

Broke? Find employment in Southeast Asia with JobCute Thailand. Rich? Invest in real estate across Asia with FazWaz Property Group. Even book medical procedures worldwide with MyMediTravel, all powered by DB Ventures.

Archiving articles from the Phuket Gazette circa 1998 - 2017. View the Phuket Gazette online archive and Digital Gazette PDF Prints.

Follow Thaiger by email:

Myanmar8 hours ago

Burmese military media outlets say ethnic army killed 25 workers

Thailand10 hours ago

PM Prayut Chan-o-cha says drug suppression should to be a national priority

Thailand11 hours ago

Purchases of fancy street lamps being investigated for possible corruption

Phuket Sandbox July 1st

days
hours
minutes
seconds

Thaiger is getting behind local businesses for the restart of tourism in July - up to 50% discounts across all advertising packages in June!

Sponsored by image

Thailand11 hours ago

Thailand News Today | BKK parks re-open… nearly, tropical storm, airport security upgrade | June 14

Thailand11 hours ago

Missing fisherman’s body found in sea off Nakhon Si Thammarat

Coronavirus (Covid-19)12 hours ago

CCSA: We’re out of vaccines

Coronavirus (Covid-19)12 hours ago

Ayutthaya hospital to test all staff for Covid after 18 test positive

Thailand13 hours ago

13 teenagers arrested in Chon Buri for partying, gathering

Crime13 hours ago

Crime Suppression Division seizes dozens of illegal firearms in a series of raids

Crime13 hours ago

Marijuana valued at 10 million baht seized in Nakhon Phanom, 2 arrested

Coronavirus (Covid-19)14 hours ago

Monday Covid Update: 3,355 new cases, provincial totals

Coronavirus (Covid-19)14 hours ago

Almost 100% of teachers and staff vaccinated in Bangkok

Thailand15 hours ago

Almost 8 million register for stimulus scheme, app briefly goes down

Best of15 hours ago

Top 5 best temples in Bangkok

Thailand16 hours ago

Good Morning Thailand | What’s happening in Pattaya, Phuket sandbox, reopening for tourism

Thailand3 months ago

Thailand News Today | Thai Airways in rehab, All go for Songkran | March 4

Tourism3 months ago

Phuket’s nightlife. Yes, bars and clubs are still open | VIDEO

Phuket3 months ago

Thailand News Today | Covid passport talks, Thai Airways heads to court | March 2

Tourism4 months ago

Phuket Thai food treats you need to try | VIDEO

Thailand4 months ago

Thailand News Today | Bars, pubs and restaurants ‘sort of’ back to normal | Feb 23

Tourism4 months ago

In search of Cat & Dog Cafés in Phuket Town | VIDEO

Thailand5 months ago

Thailand News Today | Gambling crackdown, Seafood market to reopen, Vlogger challenge | Jan 21

Thailand5 months ago

Thailand News Today | Covid testing for visas, Business impact, Vaccine approval | January 19

Thailand5 months ago

Thailand News Today | Weekend Bangkok bombs, Thailand fires, Covid update | January 18

Thailand5 months ago

Thailand News Today | Stray car on runway, Indonesian quake, 300 baht tourist fee | January 15

Thailand5 months ago

Thailand News Today | Governor off respirator, sex-trafficking arrest, condo prices falling | January 14

Thailand5 months ago

Thailand News Today | Chinese vaccine, Thailand ‘drug hub’, Covid update | January 13

Thailand5 months ago

Thailand News Today | Bangkok may ease restrictions, Phuket bar curfew, Vaccine roll out | January 12

Thailand5 months ago

Thailand News Today | Covid latest, Cockfights closed down, Bryde’s Whale beached | January 11

Thailand5 months ago

Thailand News Today | Southern floods, Face mask fines, Thai Air Asia woes | January 8

Trending