Cyber Risks · Krebs on Security

Indian Bank Hit in $13.5M Cyberheist After FBI ATM Cashout Warning

Summary: Cosmos Bank in Pune, India disclosed that hackers broke into its servers and stole nearly $2 million in fraudulent bank transfers plus about $11.5 million in unauthorized ATM withdrawals across 28 countries, executing the heist on Aug. 11, one day after the FBI's Aug. 10 alert warning of an imminent global ATM cashout. The 112-year-old bank said the malware hit a switching system handling Visa and Rupay debit card payment requests, not its core banking system, and that customer accounts and balances were unaffected.

Why it matters: The FBI's warning arrived before the money moved, yet roughly $13.5 million still left Cosmos Bank through a payment switch the attackers bypassed with a proxy - and the FBI notes these cashouts concentrate on smaller institutions with less robust security controls or third-party vendor exposure.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related