SUBSCRIBERS

Bangladesh heist could have been prevented

Proactive privileged account controls and advanced detection capabilities would have foiled the cyber crooks.

Published Tue, Jun 28, 2016 · 09:50 PM

    DeeperDive is a beta AI feature. Refer to full articles for the facts.

    ON May 15, 2015, three bank accounts were opened at the Rizal Commercial Banking Corporation (RCBC) in the Philippines. Each of these accounts was to lie dormant until Feb 4 the following year. The authorities were to find out only later that the accounts were fake, and linked to an attempt by the cyber criminals to steal nearly US$1 billion from the Bangladesh Central Bank.

    The heist had been in the planning for nearly a year, but thanks in large part to a spelling error that raised alarm bells, the attackers made off with only US$81 million.

    To understand how this attack occurred, it is first necessary to understand the role of Swift in monetary transactions between financial institutions, including central banks.

    Copyright SPH Media. All rights reserved.