SWIFT, the global financial system used to move hundreds of billions of dollars a day, on Friday said highly sophisticated hackers had gained access to a bank aiming to hijack fund transfers made via the network. SWIFT - the Society for World-wide Interbank Financial Telecommunication - insisted its own system had not been compromised, but warned that this latest attack was clearly part of a wide-ranging campaign.
It comes months after a multi-million dollar heist at the Bangladesh central bank. "Forensic experts believe this new discovery evidences that the malware used in the earlier reported customer incident was not a single occurrence but part of a wider and highly adaptive campaign targeting banks," the Brussels-based group said in a letter to clients.
In both cases, the hackers "exploited vulnerabilities" at the two unnamed banks to gain access to their fund transfer systems, which then give instructions to the SWIFT network, it said. "The attackers clearly exhibit a deep and sophisticated knowledge of specific operational controls within the targeted banks - knowledge that may have been gained from malicious insiders or cyber attacks, or a combination of both," SWIFT said. In light of the latest attack, SWIFT called on its customers "as a matter of urgency" to review all their internal controls.