Cyber Risks · Krebs on Security

FBI Investigating Cyber Theft of $139,000 from Pittsford, NY

Summary: Thieves logged into the Town of Pittsford, New York's online commercial banking account on or around June 1, 2011 and initiated ACH transfers to money mules, who withdrew the cash and wired it to individuals in Saint Petersburg, Russia and Kiev, Ukraine via Western Union and Moneygram. Over four business days the attackers sent another three fraudulent batch payments, most under $5,000, and the town recovered just $4,800 of the $139,000 taken.

Bottom line: The FBI told the town supervisor the password was most likely stolen with a banking Trojan, and the fraud went undetected for days at a municipality that had just opened the account and had not yet set up the dual-approval controls it used at its previous bank.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related