SUBSCRIBERS

Bangladesh heist could have been prevented

Proactive privileged account controls and advanced detection capabilities would have foiled the cyber crooks.

Published Tue, Jun 28, 2016 · 09:50 PM

    ON May 15, 2015, three bank accounts were opened at the Rizal Commercial Banking Corporation (RCBC) in the Philippines. Each of these accounts was to lie dormant until Feb 4 the following year. The authorities were to find out only later that the accounts were fake, and linked to an attempt by the cyber criminals to steal nearly US$1 billion from the Bangladesh Central Bank.

    The heist had been in the planning for nearly a year, but thanks in large part to a spelling error that raised alarm bells, the attackers made off with only US$81 million.

    To understand how this attack occurred, it is first necessary to understand the role of Swift in monetary transactions between financial institutions, including central banks.

    Copyright SPH Media. All rights reserved.