Second hacker group targets SWIFT users, Symantec warns
- Futures rise as 'Trump rally' rolls on
- Broadcom Ltd. (AVGO) Tops Q4 EPS by 11c
- Sibanye Gold (SBGL) to Acquire Stillwater Mining Company (SWC) in $2.2B Deal
- Exclusive: ECB rejects Monte Paschi's request for more time to raise cash - source
- Coca Cola (KO) Announces James Quincey to Succeed Muhtar Kent as CEO; Kent to Continue as Chairman
Swift code bank logo is displayed on an iPhone 6s on top of Euro banknotes in this picture illustration, January 26, 2016. REUTERS/Dado Ruvic/Illustration/File Photo
Get access to the best calls on Wall Street with StreetInsider.com's Ratings Insider Elite. Get your Free Trial here.
By Jim Finkle
(Reuters) - Cyber-security firm Symantec Corp said on Tuesday that a second hacking group has sought to rob banks using fraudulent SWIFT messages, the same approach that yielded $81 million in the high-profile February attack on Bangladesh's central bank.
Symantec said that a group dubbed Odinaff has infected 10 to 20 organizations with malware that can be used to hide fraudulent transfer requests made over SWIFT, the messaging system that is a lynchpin of the global financial system.
Symantec's research provided new insight into ongoing hacking that has previously been disclosed by SWIFT. SWIFT Chief Executive Gottfried Leibbrandt last month told customers about three hacks and warned that cyber attacks on banks are poised to rise.
SWIFT and Symantec have not identified specific victims beyond Bangladesh Bank. Symantec said that most Odinaff attacks occurred in the United States, Hong Kong, Australia, the United Kingdom and Ukraine.
Symantec said it would share technical information about Odinaff with banks, governments and other security firms.
The company in May said it believed the Bangladesh heist was carried out by a group known as Lazarus, which was also responsible for attacks on SWIFT customers in Southeast Asia as well as the 2014 hack of Sony Pictures Entertainment.
The U.S. government has blamed North Korea for the Sony attack.
Symantec researcher Eric Chien said his firm has not confirmed that North Korea was behind Lazarus, but that the high level of sophistication of its work suggests involvement by a nation state.
Odinaff, on the other hand, appears to be a financially motivated criminal group, not a nation state, he added.
SWIFT spokeswoman Natasha de Terán said that the messaging cooperative's customer security intelligence team had sent a warning about Odinaff's activities to its members in the early summer.
That warning included technical indicators to help thwart potential attacks and a description of the group's habits, Terán said.
Symantec said it believed that Odinaff is linked to Carbanak, a hacking group that has been targeting banks and merchant point-of-sale systems since at least 2014.
The two groups employ similar tactics in carrying out attacks and have used the same IP addresses to connect to their servers, according to Symantec.
(This version of the story corrects to make clear that 10 to 20 organizations were infected with Odinaff and not all of them were Symantec customers in the second paragraph)
(Reporting by Jim Finkle in Boston; Editing by Cynthia Osterman)
Serious News for Serious Traders! Try StreetInsider.com Premium Free!
You May Also Be Interested In
- Third-Party Said Interested in PrivateBancorp (PVTB) as CIBC (CM) Deal is Delayed
- Seanergy Maritime (SHIP) Prices 10M Common Shares, Warrants Offering for Proceeds of ~$15M
- Magellan Midstream Partners (MMP) Files $750M Common Units Shelf
Create E-mail Alert Related CategoriesReuters
Sign up for StreetInsider Free!
Receive full access to all new and archived articles, unlimited portfolio tracking, e-mail alerts, custom newswires and RSS feeds - and more!