Ukraine bank latest victim in SWIFT-based bank heists
Hackers are believed to have stolen $10m from an unnamed Ukrainian bank using the SWIFT international banking payments system. The IT monitoring organisation, Information Systems Audit and Control Association (ISACA), brought in to investigate the attack, said that the hackers compromised the bank’s system in a similar way to which Bangladesh Bank was targeted in February. In a statement, the Ukraine branch of ISACA revealed: “At the current moment, dozens of banks (mostly in Ukraine and Russia) have been compromised, from which has been stolen hundreds of millions of dollars.” However, it provided no further information. To date, a number of banks are known to have been targeted, but not on the scale ISACA has suggested.

"At the current moment, dozens of banks (mostly in Ukraine and Russia) have been compromised, from which has been stolen hundreds of millions of dollars," ISACA reportedly said in a release.

UPCOMING WEBINAR 🔐 Mastering API Security: Understanding Your True Attack Surface Discover the untapped vulnerabilities in your API ecosystem and take proactive steps towards ironclad security. Join our insightful webinar! Join the Session

Here's how Swift hackers target banks:

Uses malware to circumvent local security systems of a target bank.

Gains access to the SWIFT international messaging network.

Sends fraudulent messages via SWIFT to initiate money transfers from accounts at larger banks.

A Ukrainian bank has become the latest victim of the widespread cyber attack on global banking and financial sector by hackers who target the backbone of the world financial system, SWIFT.Hackers have reportedly stolen $10 Million from an unnamed bank in Ukraine by exploiting the SWIFT international banking system, according to an independent IT monitoring organization called the Information Systems Audit and Control Association (ISACA).Swift or the Society for Worldwide Interbank Financial Telecommunication is the global banking messaging system responsible for managing Billions of dollars in money transfers each day between financial institutions worldwide.The ISACA branch in Ukraine, who has been hired by the targeted bank to investigate the heist, disclosed that some unknown hackers were able to compromise the bank's security in similar way they hacked Bangladesh central bank and stole $81m (£56m), the Kyiv Post reports.The Swift hackers have already made a number of victims, including Bangladesh central bank, the Banco del Austro (BDA) bank in Ecuador and an unnamed commercial bank.In February, Swift hackers managed to steal $81 Million cyberheist at the Bangladesh central bank's account in the New York Federal Reserve through by hacking into SWIFT network using a piece of malware that manipulated logs and erased the fraudulent transactions history, and even prevented printers from printing those transactions.The second incident targeted an unnamed commercial bank where malware installed on SWIFT was used against the banks' PDF reader which was being used by the bank to check statement messages.An Ecuadorian bank called Banco del Austro (BDA) also lost about $12 million in the cyber heist carried out at the beginning of last year by attacking the Swift global network.In all incidents, the hackers have exploited flaws in banks funds' transfer initiation environments, before messages being sent over SWIFT.The recently attacked bank in question had not yet been named, as investigators are restricted by strict non-disclosure agreements until the Ukrainian bank itself agrees to go public with information.