Hackers stole $ 1.1 million from a Swedish bank
Russian hackers stole about 8 million Swedish crowns (about $ 1.1 million) from the accounts of Nordea bank customers in Sweden, reports ZDNet UK . Criminal transactions were conducted during the last three months of 2006, 250 clients of the bank became their victims.
This robbery could be the largest online fraud in history. We ran it in a phishing scheme: on behalf of Nordea, emails were sent to customers asking them to install raking.zip, supposedly designed to combat spam.
The people who got the bait installed the contents of the attached file with haxdoor.ki Trojan on the computer. In this case, anti-virus protection was often absent, according to experts investigating the incident.
')
The keylogger, which recorded data on keystrokes, was also included in the trojan, as well as a rootkit that was activated when accessing Nordea resources. In some cases, users were redirected to false pages. Bank customers did not know about the trick and "shared" confidential information with scammers. They used it in real Nordea services.
According to representatives of the bank, there was a significant case of using social engineering methods. They report that the transactions carried out by the hackers, for the most part, were not large and looked like normal client operations. Nordea does not recognize the damage to its own security system. Anyway, the bank promised to compensate the lost 8 million kroons.
Nordea Bank is considered one of the largest in the Scandinavian region, it serves more than 2.2 million customers.
This robbery could be the largest online fraud in history. We ran it in a phishing scheme: on behalf of Nordea, emails were sent to customers asking them to install raking.zip, supposedly designed to combat spam.
The people who got the bait installed the contents of the attached file with haxdoor.ki Trojan on the computer. In this case, anti-virus protection was often absent, according to experts investigating the incident.
')
The keylogger, which recorded data on keystrokes, was also included in the trojan, as well as a rootkit that was activated when accessing Nordea resources. In some cases, users were redirected to false pages. Bank customers did not know about the trick and "shared" confidential information with scammers. They used it in real Nordea services.
According to representatives of the bank, there was a significant case of using social engineering methods. They report that the transactions carried out by the hackers, for the most part, were not large and looked like normal client operations. Nordea does not recognize the damage to its own security system. Anyway, the bank promised to compensate the lost 8 million kroons.
Nordea Bank is considered one of the largest in the Scandinavian region, it serves more than 2.2 million customers.
Source: https://habr.com/ru/post/4977/
All Articles