Ecuadorian bank lost $12m in SWIFT heist in 2015

Another attack using the international SWIFT system has been revealed, involving the Banco del Austro (BDA) in Ecuador. The attack took place in January 2015, months earlier than the successful attack on Bangladesh Bank and the attempted attack on a bank in Vietnam, and resulted in the loss of $12m. Reports suggest that over a period of ten days, the hackers used the SWIFT credentials of a BDA employee to modify transaction details for at least 12 transfers. The money went to accounts in Dubai, Hong Kong, Los Angeles, and New York. The attack has only come to light as a result of a lawsuit that BDA filed against Wells Fargo; BDA holds Wells Fargo responsible for not spotting the fraudulent transactions and has called on the bank to return the lost funds in full. The SWIFT system was not compromised during the attack, however, those running it were also not made aware of the heist. In a statement, SWIFT said that it needs to be told of this type of fraud so that it can inform the wider community.

Uses malware to circumvent local security systems of a bank.

Gains access to the SWIFT messaging network.

Sends fraudulent messages via SWIFT to initiate cash transfers from accounts at larger banks.

Wells Fargo has also fired back and blamed BDA's information security policies and procedures for the heist and noted that it "properly processed the wire instructions received via authenticated SWIFT messages," according to court documents.

UPCOMING WEBINAR 🔐 Mastering API Security: Understanding Your True Attack Surface Discover the untapped vulnerabilities in your API ecosystem and take proactive steps towards ironclad security. Join our insightful webinar! Join the Session

"We were not aware," SWIFT said in a statement. "We need to be informed by customers of such frauds if they relate to our products and services so that we can inform and support the wider community. We have been in touch with the bank concerned to get more information, and are reminding customers of their obligations to share such information with us."

Bangladesh is not the only bank that had become victim to the cyber heist . In fact, it appears to be just a part of the widespread cyber attack on global banking and financial sector by hackers who target the backbone of the world financial system, SWIFT.Yes, the global banking messaging system that thousands of banks and companies around the world use to transfer Billions of dollars in transfers each day is under attack.A third case involving SWIFT has emerged in which cyber criminals have stolen about $12 million from an Ecuadorian bank that contained numerous similarities of later attacks against Bangladesh's central bank that lost $81 Million in the cyber heist The attack onin Ecuador occurred in January 2015 and, revealed via a lawsuit filed by BDA against Wells Fargo, a San Francisco-based bank on Jan. 28, Reuters reported.Here's how cyber criminals target banks:Over ten days, hackers used SWIFT credentials of a bank employee to modify transaction details for at least 12 transfers amounting to over $12 Million, which was transferred to accounts in Hong Kong, Dubai, New York and Los Angeles.In the lawsuit, BDA holds Wells Fargo responsible for not spotting the fraudulent transactions and has demanded Wells Fargo to return the full amount that was stolen from the bank.The lawsuit filed by BDA in a New York federal court described that the some of these attacks could have been prevented if banks would have shared more details about the attacks with the SWIFT organization.According to reports, the heist remained a secret for a long time and now disclosed when BDA decided to sue Wells Fargo that approved the fraudulent transfers.SWIFT did not have any idea about the breach, as neither BDA nor Wells Fargo shared any detail about the attack.It turns out that the security of SWIFT itself was not breached in the attack, but cyber criminals used advanced malware to steal credentials of bank's employees and cover their tracks.In February, $81 Million cyberheist at the Bangladesh central bank was carried out by hacking into SWIFT using a piece of malware that manipulated logs and erased the fraudulent transactions history, and even prevented printers from printing those transactions.