Cyber criminals have in recent years broken into with banks in Russia and in former soviet states. They obtained access to the internal systems of the banks, to atms, to be able to sabotage. Western banks may also be vulnerable.
That report, among others, the Dutch Fox-IT Monday after research. The relatively unknown group, that Anunak is called, is originally from Russia and Ukraine and would have since last year engaged in a series of attacks on banks. They focus on institutions in Russia and former soviet states, where they try to break in on the network of the bank.
Once they have access to the internal network of a bank, they take control over computers of system administrators. Also, they use, among other self-written malware in order to, via the network, the settings of the atm, for the time being of the brand Wincor, to change. Thus, they are able to get more money than was originally granted. For example, they can according to the system notes of a hundred roubles at an atm, but actually notes of five thousand rubles is paid.
The criminals would since the beginning of last year, more than a billion rubles, converted more than two million euros, have captured. Fox-IT says in addition that the group had access to the networks of at least fifty Russian banks and five payment systems. Further, they would at sixteen companies in the retail sector have broken. Of which companies are the most outside Russia, but not in Europe and the United States.
According to Fox-IT is especially remarkable that the criminals are not stealing money from individuals, but from the banks themselves. They broke for as far as known, not yet on Western companies, but the security company close this for the future. In addition, the ‘pragmatic approach’ of the attackers lead to that banks will have to act against attacks.
Possible for the cyber criminals have ties with those who are the so-called Carberp malware developed, know Krebson Security. This malware was aimed at collecting inlogdata for online banking. The same criminals had allegedly been involved in other attacks on Russian banks. In addition they made about 200 million euro of loot.