Forest Global Training Partners

Cyber Risks · Krebs on Security

Phishers Target Anti-Money Laundering Officers at U.S. Credit Unions

Summary: On the morning of Wednesday, Jan. 30, Bank Secrecy Act officers at credit unions nationwide received spear-phishing emails spoofed to appear from BSA officers at other credit unions, addressing each recipient by name and claiming a customer's suspicious transfer was held for suspected money laundering, with an attached PDF linking to a malicious site. Many credit union sources said they suspected the non-public BSA contact list came from the National Credit Union Administration, which requires credit unions to register their BSA officers and says it will not release that contact information to the public.

What you should know: The recipient list itself is the story: a campaign that reached only named BSA officers suggests non-public contact data may have left a regulator's hands, and the NCUA's review of its security logs found no indication information was compromised while the campaign was later confirmed to extend beyond credit unions to other parts of the financial sector.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related