Russian Central Bank
May 12, 2017
•[ ransomware, malware, finance ]
A threat actor used a tool called WannaCry to encrypt data in compromised networks, and intended to provide the victims with the decryption key only after a ransom had been paid. The threat actors used an exploit, called EternalBlue--first discovered by the U.S. National Security Agency--to propagate WannaCry in organizations using the Windows operating system. The Russian Central Bank detected an attack on its systems, but was able to thwart it.
ATMs in India
June 14, 2017
•[ hack, malware, finance ]
ATMs in India are under attack via Rufus, a Chinese malware targeting cash machines running outdated Windows XP.
UK Banks
May 2, 2017
•[ social, phishing, finance ]
DomainTools reveals that hundreds of fake website domains are being used by hackers to mimic some of the most popular banking services in the UK in an attempt to trick victims into handing over personal details and sensitive login credentials.
Unnamed Kazakh bank
April 4, 2017
•[ financial, malware, finance ]
Kaspersky reveals the details of ATMitch, a fileless malware used to steal cash from ATMs. The researchers have only tracked down two incidents where ATMitch was used. The second is in a Kazakh bank.
Verifone
March 7, 2017
•[ hack, finance ]
Credit and debit card payments giant Verifone investigates a breach of its internal computer networks that appears to have impacted a number of companies running its point-of-sale solutions.
KCG Holdings
April 23, 2017
•[ insider, espionage, malware ]
The FBI arrests Zhengquan Zhang, a 31-year-old IT engineer, accused of installing malware on his employer's servers to steal proprietary source.
Union Bank of India
April 11, 2017
•[ hack, finance ]
North Korean hackers are suspected of attempting to steal $170m from Union Bank of India, back in 2015.
Yapizon
April 22, 2017
•[ hack, financial, finance ]
Yapizon, a South Korean Bitcoin exchange suffers a massive data breach when hackers steal 3,800 Bitcoin (US$5 million) which is 37% of user funds.
Unnamed Brazilian bank
April 4, 2017
•[ hack, phishing, finance ]
Kaspersky reveals that on October 2016, a group of hackers rerouted all the traffic of an unnamed Brazilian bank's customers to perfectly reconstructed fakes of the bank's properties.
Email accounts of Irish solicitors
February 5, 2017
•[ financial, hack, finance ]
The Sunday Independent reveals that cybercriminals are hacking the email accounts of Irish solicitors in an attempt to steal tens of thousands of euro from unsuspecting home buyers.
Unnamed Russian bank
April 4, 2017
•[ financial, malware, finance ]
Kaspersky reveals the details of ATMitch, a fileless malware used to steal cash from ATMs. The researchers have only tracked down two incidents where ATMitch was used. The first is in a Russian bank.
Bitfinex
February 22, 2017
•[ hack, ddos, finance ]
Top Bitcoin trading platform Bitfinex is hit by a "severe DDoS attack."
Zcoin
February 17, 2017
•[ hack, misconfiguration, finance ]
A simple one-digit typo within the source code of a cryptocurrency called Zcoin has allowed a hacker to make a profit of over $400,000 worth of cryptocurrency.
Hitachi Payment Services
February 9, 2017
•[ hack, malware, finance ]
Hitachi Payments Services confirms that its systems were compromised by a sophisticated malware in mid-2016, that led to one of the biggest cyber security breaches in the country with 3.2 million cards affected.
XP Investimentos SA
January 23, 2017
•[ hack, finance ]
Hackers who stole data from 29,000 clients of XP Investimentos SA allegedly tried to get the Brazilian independent securities firm to pay 22.5 million reais ($7.1 million) to keep the security breach secret.
Hong Kong securities brokers
January 26, 2017
•[ hack, ddos, finance ]
Hong Kong's securities regulator says that brokers in the city have suffered major DDoS cyber attacks and warns of possible further incidents across the industry.
Lloyds Bank
January 23, 2017
•[ hack, ddos, finance ]
The Financial Times reveals that Lloyds Bank has been targeted by a large scale DDoS attack over the past two weeks. Two crooks claims responsibility for the attack.
DRI Title & Escrow
December 28, 2016
•[ hack, finance ]
The Dark Overlord claims to have hacked DRI Title & Escrow and leaks some internal data.
Summit Reinsurance Services Inc.
December 16, 2016
•[ hack, finance ]
Personal Information of about 1000 Black Hawk College employees and their dependents could have been compromised in a hack of Summit Reinsurance Services Inc., a former insurance provider's server.
Undisclosed Ukrainian banks
December 15, 2016
•[ hack, malware, finance ]
ESET reports that BlackEnergy, the same group who targeted Ukrainian utilities last December has been using the TeleBots malware against Ukrainian banks in the last month.
