Statistics of the Central Bank: the earnings of hackers from cyber attacks on financial institutions in 2018 fell almost 14 times
3r3141. 3r3-31.
3r3141.
3r3141. [i] Image:
Christiaan Colen | CC BY-SA ???r3r3127. 3r314.
3r3141.
3r3141. A division of the Bank of Russia called FinCert, which deals with cybersecurity issues in the financial sector, presented a new report on the situation in the industry. According to statistics,
published 3r3127. “Vedomosti”, hackers increasingly difficult to successfully attack financial institutions. The decrease in profits forces attackers to switch to clients and users of financial companies.
3r3141.
3r3141. 3r399. Earnings hackers declined
3r3141. According to the report, from January to August 2018 targeted attacks brought them 76.5 million rubles. A year earlier, cybercriminals' income amounted to ??? billion rubles, and this despite the increase in the total number of attacks (22 in 2018 against 20 last year).
3r3141.
3r3141. According to the conclusions of FinCERT experts, the damage from hackers is reduced due to the successful counteraction to their work by the security services of financial companies and law enforcement agencies.
3r3141.
3r3141. For example, in March of this year, one of the leaders of the hacker group Cobalt was detained, which carried out large-scale and successful attacks on financial institutions, including those related to the kidnapping of money from ATMs. In February 201? the Central Bank reported r3r3127. that for the entire 201? hackers from the Cobalt group stole ??? billion rubles from 240 Russian banks.
3r3141.
3r3141. 3r399. The focus of the attackers is shifting from the banks to their corporate customers.
3r3141. Despite the fact that hackers still manage to carry out successful attacks on banks, it becomes increasingly difficult to do so. Most criminals manage to penetrate the financial company's network using phishing (some employees still open suspicious emails) or hacking out-of-date versions of the software. However, banks are working on installing updates and staff training.
3r3141.
3r3141. At the same time, the level of information security of corporate clients of banks is usually at a much lower level. Therefore, it is often easier to attack them - so the focus of interest of hackers is shifted to small and medium-sized businesses. This is also facilitated by changes in legislation - for quite some time now, large organizations belong to the “critical infrastructure”, which toughens penalties for cyber attacks on them.
3r3141.
3r3141. 3r399. Attacks in the field of stock trading and how to protect against them 3r3-3102.
3r3141. The attention of cybercriminals attracts not only banks and their clients, but also the sphere of stock trading. They are
Hack remittance platforms trying to sneak into the 3r363 infrastructure. banks 3r3127. and exchanges stealing 3r3673. trading algorithms 3r3127. hedge funds and attack end users of financial systems.
3r3141.
3r3141. Sometimes they succeed in attacking with serious consequences. For example, in 201? hackers attacked Kazan Energobank with Trojan Corcow. With it, they managed to seize control of a computer in the network of the bank on which the trading terminal was installed. This allowed criminals to make unauthorized operations to buy and sell currency on the Moscow Stock Exchange. As a result of manipulations, in 15 minutes the ruble exchange rate fell by 15%, and the company lost 244 million. 3r3141.
3r3141. Attack and end users of software for stock trading. So recently, Russian researchers 3r377. published 3r3127. the results of their research security software for trading on the exchange. It turned out that in 61% of applications, an attacker could gain control over the personal account of the user of the trading terminal, and in 17% of applications it is possible to change the displayed quotes and charts. In the first case, the hacker can perform unauthorized operations, and in the second, mislead the user and force him to take the wrong investment decision, leading to losses.
3r3141.
3r3141. To prevent such attacks, users should use a “clean” computer for trading on the stock exchange, which is not normally used for web surfing. It is also worth using two-factor authentication for login to your personal account on the broker's website.
3r3141.
3r3141. In addition, the brokerage companies themselves are working on user security. For example, users of the trading terminal SMARTx 3r3127. from ITI Capital can activate a specialized module of risk management. It allows you to set restrictions for violation of which - for example, a certain loss is achieved - the sending of new orders and the opening of new positions is prohibited.
3r3141.
3r3141. In addition, you can use r3r393 to verify the data displayed in the trading terminal. API SMARTcom - the service allows you to develop your own trading applications, program robots and use partner applications. Before making large transactions, the trader will be able to verify the data in the terminal and third-party software to minimize the risk of error.
3r3141.
3r3141. 3r399. Other materials on finance and stock market from 3-333100. ITI Capital 3r3-3127. : 3r3102.
3r3141. 3r3105. 3r3141. 3r3117. 3r3108. Market analysts and reviews
3r3128. 3r3141. 3r3117. 3r3113. Back to the Future: Testing a trading robot with historical data
3r3128. 3r3141. 3r3117. Event-oriented Python backtesting step by step (3r3118. Part 1 3r3127., 3r3-33120. Part 2
,
Part 3 3r3r1227.,
Part 4 3r31377. ? ? ? ? ? ? ? 37? 7., ? 3r? 37?. 3r3141. 3r33130.
3r3141. 3r3141. 3r3133. ! function (e) {function t (t, n) {if (! (n in e)) {for (var r, a = e.document, i = a.scripts, o = i.length; o-- ;) if (-1! == i[o].src.indexOf (t)) {r = i[o]; break} if (! r) {r = a.createElement ("script"), r.type = "text /jаvascript", r.async =! ? r.defer =! ? r.src = t, r.charset = "UTF-8"; var d = function () {var e = a.getElementsByTagName ("script")[0]; e.parentNode.insertBefore (r, e)}; "[object Opera]" == e.opera? a.addEventListener? a.addEventListener ("DOMContentLoaded", d,! 1): e.attachEvent ("onload", d ): d ()}}} t ("//mediator.mail.ru/script/2820404/"""_mediator") () ();
3r3141.
3r3141. 3r3141. 3r3141. 3r3141.
It may be interesting
weber
Author20-10-2018, 17:20
Publication DateFinance in IT / Information Security
Category- Comments: 0
- Views: 344
Hey what a brilliant post I have come across and believe me I have been searching out for this similar kind of post for past a week and hardly came across this. Thank you very much and will look for more postings from you. [Url = https: //mtsoul.net] 먹튀 검증 [/ url]