A global cyber crime syndicate’s recent bank heist has demonstrated how serious the threat of cyber crime is to banks around the world. It also shows how increasingly international and sophisticated criminal gangs have become, particularly those using the Internet.
U.S. prosecutors reported on Thursday that a global cyber crime ring stole $45 million from two Middle Eastern banks by hacking into credit card processing firms and withdrawing money from ATM’s in 27 countries.
Cyber experts said they believe the operation likely required the cooperation of several hundred people, at least several of whom were highly skilled hackers capable of devising ways to penetrate well-protected financial systems.
The group may have targeted Middle Eastern banks because they tend to allow customers to put much larger sums on cards and do not monitor them as closely as banks in other regions, said Shane Shook, global vice president of consulting for the security firm Cylance Inc.
“It’s a target-rich environment in terms of soft electronic security,” said Shook, an Arabic speaker who has spent more than a decade investigating cyber crimes.
The U.S. Justice Department accused eight men of allegedly forming the New York-based cell of the organization, and said seven of them have been arrested. The eighth, allegedly a leader of the cell, was reported to have been murdered in the Dominican Republic on April 27.
The ringleaders are believed to be outside the United States but prosecutors declined to give details, citing the ongoing investigation. What’s clear is the sheer scope and speed of the crimes: in one of the attacks, in just over 10 hours, $40 million was raided from ATM‘s in 24 countries involving 36,000 transactions.
“In the place of guns and masks, this cyber crime organization used laptops and the Internet,” U.S. Attorney for the Eastern District of New York Loretta Lynch said at a news conference. “Moving as swiftly as data over the Internet, the organization worked its way from the computer systems of international corporations to the streets of New York City.”
Prosecutors highlighted the “surgical precision” of these hackers, the global nature of their organization, and the speed and coordination with which they executed operations in 27 countries.
The hackers increased the available balance and withdrawal limits on prepaid MasterCard debit cards issued by Bank of Muscat of Oman, and National Bank of Ras Al Khaimah PSC (RAKBANK) of the United Arab Emirates, according to the complaint. They then distributed counterfeit debit cards to “cashers” around the world, enabling them to siphon millions of dollars from ATMs in a matter of hours.
In New York, for example, members of the cell fanned out into the city on the afternoon of February 19, armed with cards bearing a single Bank of Muscat account number. Ten hours later, they had completed 2,904 withdrawals for $2.4 million in all, the final transaction coming around 1:26 a.m., prosecutors said.
Casher crews in other countries were busy doing the same, pulling some $40 million from Bank of Muscat to add to the $5 million they stole from RAKBANK in December, according to the indictment. In total, cashers made some 40,500 withdrawals in 27 countries during the two coordinated incidents.
It is not clear if banks can seek to recover losses from card processors, legal experts said. Contracts usually have specific language governing the security protocols that must be in place, said Frederick Rivera, an attorney with Perkins Cole who specializes in financial services litigation.
Lynch said the New York gang kept roughly 20 percent of their takes, and sent the rest to the organizers. Authorities said they seized hundreds of thousands of dollars in cash and bank accounts, as well as two Rolex watches and a Mercedes SUV, from the defendants.
An investigation is ongoing to see if other cells are operating in the country, Lynch said, adding that U.S. law enforcement had worked with counterparts in Japan, Canada, Germany, Romania, the United Arab Emirates, Dominican Republic, Mexico, Italy, Spain, Belgium, France, United Kingdom, Latvia, Estonia, Thailand, and Malaysia to uncover the ring.
Sourced from Reuters
With over twenty five years’ of financial experience, TJC Global can deliver the financial Translation you require. With our diverse network of linguists, we can provide a financial Translator with years of experience in your required field and fluency in your target language. Financial services are a vital part of both the global economy and the economies of individual countries. Traders, buyers, and sellers communicate with colleagues across the globe, and it is vital that such communication is free-flowing and that information shared is accurate and unambiguous; TJC’s experts can assist you in that area.
If you require assistance in Financial Conferences, please see our conference page.