Revealed: How Citigroup hackers broke in 'through the front door' using bank's website Read more: http://www.dailymail. - Techist - Tech Forum

Go Back   Techist - Tech Forum > Techist Forum Information > News > The Net
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 06-14-2011, 07:00 PM   #1 (permalink)
Destroyer of headlines
 
Megatron's Avatar
 
Join Date: Jan 2011
Location: Headlines
Posts: 629
Default Revealed: How Citigroup hackers broke in 'through the front door' using bank's website Read more: http://www.dailymail.

Quote:
Hackers who stole the personal details of more than 200,000 Citigroup customers 'broke in through the front door' using an extremely simple technique.

It has been called 'one of the most brazen bank hacking attacks' in recent years.

And for the first time it has been revealed how the sophisticated cyber criminals made off with the staggering bounty of names, account numbers, email addresses and transaction histories.

They simply logged on to the part of the group's site reserved for credit card customers - and substituted their account numbers which appeared in the browser's address bar with other numbers.

It allowed them to leapfrog into the accounts of other customers - with an automatic computer programme letting them repeat the trick tens of thousands of times.

The security breach, which was only spotted in May during a routine check, follows the high profile and embarrassing hacking of Sony's Playstation network.

Security experts said it also showed the threat posed by the rising demand for private financial information from the world of foreign hackers. It was also a 'sign of things to come', they said.

One expert, who is part of the investigation and wants to remain anonymous because the inquiry is at an early stage, told The New York Times he wondered how the hackers could have known to breach security by focusing on the vulnerability in the browser.

He said: 'It would have been hard to prepare for this type of vulnerability.'

It is not known how much the incident is going to cost Citigroup and its customers.

Spokesman Sean Kevelighan declined to comment as it was an 'ongoing criminal investigation'.

But in a statement he said Citigroup discovered the breach in early May and the problem was 'rectified immediately'.

He also said the bank had initiated internal fraud alerts and stepped up its account monitoring.
Breach: Citigroup discovered the attack in May and immediately stepped up its account monitoring

Breach: Citigroup discovered the attack in May and immediately stepped up its account monitoring

Law enforcement officials said the expertise behind the attack was a 'sign of what is likely to be a wave of more and more sophisticated breaches' by high-tech thieves.

This is because, according to a report by Verizon and the Secret Service, the demand for data is on the rise.

In 2008 the underground market for data was flooded with more than 360 million stolen personal records, compared to just 3.8 million in 2010.

As the credit cards, whose numbers were stolen in 2008, expire, there is a rush to find new accounts.

It could see the price for basic credit card information rise from their current level of only pennies to several dollars.

Bryan Sartin, forensic investigator for Verizon's consulting arm, said: 'If you think financially motivated breaches are huge now, just wait another year.'

The hackers which targeted Citigroup did not gain expiration dates or the three-digit security code on the back of the card.

Those two elements would have made it much easier for the thieves to use the information to commit fraud.

Read more: How Citigroup hackers broke in 'through the front door' using bank's website | Mail Online

Source
__________________

Megatron is offline  
Old 06-14-2011, 07:21 PM   #2 (permalink)
Hyper Techie
 
Abstract Hero's Avatar
 
Join Date: Apr 2010
Location: Phoenix, AZ
Posts: 1,842
Default Re: Revealed: How Citigroup hackers broke in 'through the front door' using bank's website Read more: http://www.dailym

It's really sad that anyone could have done this through their browser.
__________________
- AMD FX8320 @ 4.2Ghz - ASRock Fatal1ty 990FX Killer - G.Skill Ripjaws X 8gb -
- Asus Strix GTX 970 - Corsair Neutron GTX - Corsair TX 750 -
- Cooler Master HAF XB - Corsair H105 -
- Asus VG248QE - Corsair M60 & K90 -
Abstract Hero is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Http 500 error...not website owner though :S Archer Internet Software and Browsers 2 11-05-2009 08:46 AM
Hackers Broke into FAA Air Traffic Control Systems Osiris Viruses, Spyware and Malware 0 05-08-2009 12:46 PM
FAA Says Hackers Broke Into Agency Computers Osiris Viruses, Spyware and Malware 3 02-13-2009 05:13 AM
Norton Corporate open door to hackers Chankama Off Topic Discussion 5 05-28-2006 02:58 AM
Java flaws open door to hackers Osiris Viruses, Spyware and Malware 0 06-16-2005 06:21 AM



Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 08:40 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.