Citibank Denies Reported Breach Linked To Russian Gang 53
Posted
by
kdawson
from the no-russians-in-here-no-siree dept.
from the no-russians-in-here-no-siree dept.
alphadogg writes "US authorities are investigating the theft of an estimated tens of millions of dollars from Citibank by criminals using Russian software tailored for the attack, according to the Wall Street Journal (subscription required to access that link — CNET's coverage here). The security breach at the major US bank was detected mid-year based on traffic from Internet addresses formerly used by the Russian Business Network gang, the WSJ reported today, citing unnamed government sources. The Russian Business Network is a well-known group linked to malicious software, hacking, child pornography, and spam. The FBI is probing the case, the report said. It was not known whether the money had been recovered and a Citibank representative said the company denied any system breach or losses, according to the report."
WSJ article was misleading (Score:5, Insightful)
The reporter was trying to link a bunch of separate things together.
1. Black Energy conducted a DDoS against Citibank, but did not steal tens of millions of dollars from them.
2. Last year, Citi lost tens of millions of dollars from skimmers attached to ATMs.
3. The hacker Cr4sh is the author of Black Energy, but there is no evidence he was involved in the attack on Citi.
There is nothing relating these three incidents other than the wishes of an aggressive reporter wanting to build some kind of story against City; *perhaps* he's trying to pump up a case to make it appear they are risking bailout money. But at least when I type this kind of crap I'm labeling it for what it is: PURE SPECULATION.
Re:WSJ article was misleading (Score:5, Insightful)
The thing the banks really don't talk about is that losses from in-house embezzlers far exceed losses form outside agents. And of course we won't speak of the enormous losses caused by management greed and stupidity.
Re:WSJ article was misleading (Score:4, Insightful)
2. Last year, Citi lost tens of millions of dollars from skimmers attached to ATMs.
2. Last year, Citi customers lost tens of millions of dollars from skimmers attached to ATMs.
(emphasis mine)
Not individually, but as a group customers always pay the bill for incompetent management / inadequate security.
Cash loss is better than trust lost (Score:5, Insightful)
Re:Citibank != Russian Gang ? (Score:3, Insightful)
Speak with awesome hardarse Russian gangster accents ... fail
Denial seems to be in this year (Score:3, Insightful)
Citibank representative said the company denied any system breach or losses, according to the report.
My web host provider *cough*inmotion*cough* got hacked a couple months ago and they denied it across the board, tried to turn it back on the users by claiming all the accesses were routine FTP connections.
Makes me wonder if denial is the new trend?
Re:WSJ article was misleading (Score:3, Insightful)
How exactly would it recoup it's losses from customers? By lowering it's interest rates? If it could increase profits by doing that they would already have done so.
Directly only the investors lose out.
Re:WSJ article was misleading (Score:3, Insightful)
The thing the banks really don't talk about is that losses from in-house embezzlers far exceed losses form outside agents.
Really? Have you recent facts to back that claim up? It may have been true in the 1950s, but is it still true in today's world, where a hacker can gain essentially "insider" authority?
And of course we won't speak of the enormous losses caused by management greed and stupidity.
There's an assertion I don't have to ask you to back up, as it's been pretty well covered in the press. But there's a lot of greed and stupidity going around, and some of it comes from the shareholders, Congress, lawyers, etc. It's not just limited to management.
Re:WSJ article was misleading (Score:3, Insightful)
For the medium-wigs: Just how much do you think you could get away with embezzling? You probably don't have *that* great of access to funds. And do you really think the bigwigs don't have people watching you pretty carefully when you're trying to make off with company money?
For the not-so-big-wigs: Do you even have access to embezzling money?
Re:Can the FBI/CIA actually do anything about it? (Score:3, Insightful)