{"id":34113,"date":"2017-12-12T22:02:05","date_gmt":"2017-12-12T22:02:05","guid":{"rendered":"http:\/\/www.bnreport.com\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/"},"modified":"2017-12-12T22:02:05","modified_gmt":"2017-12-12T22:02:05","slug":"moneytaker-hackers-reportedly-steal-7-5m-from-atms","status":"publish","type":"post","link":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/","title":{"rendered":"MoneyTaker hackers reportedly steal \u00a37.5m from ATMs"},"content":{"rendered":"

Russian-speaking hackers are suspected of stealing nearly $10m (\u00a37.5m) from 20 companies in Russia, the UK and US.<\/p>\n

The MoneyTaker group removed overdraft limits on debit cards and took money from cash machines, according to a report by cybersecurity firm Group-IB<\/a>.<\/p>\n

It also stole documentation for technology used by more than 200 banks in the US and Latin America.<\/p>\n

The documents could be used in future attacks by the hackers, according to the report. <\/p>\n

Group-IB has worked with both Europol and the Russian government to investigate cybercrime. <\/p>\n

Kevin Curran, an independent expert and professor of cybersecurity at Ulster University, said the attacks were "as sophisticated as it gets at this moment in time".<\/p>\n

"It really is perfect in some ways," he told the BBC. "They're able to compromise systems and then extract all the documents for how a banking system works so that they have the intelligence needed to produce fraudulent payments."<\/p>\n

MoneyTaker \u2013 named by Group-IB after the group's custom malware \u2013 has reportedly netted an average of $500,000 in 16 attacks against US companies and $1.2m in three attacks against Russian banks since May 2016. <\/p>\n

It also targeted a UK-based software and service provider in December 2016, according to the report.<\/p>\n

The Financial Conduct Authority and UK Finance declined to comment when contacted by the BBC. <\/p>\n

'Eliminating their traces'<\/h2>\n

MoneyTaker avoided detection "by constantly changing their tools and tactics" and "eliminating their traces after completing their operations", according to a statement from Group-IB. <\/p>\n

In its earliest-known attack, the group compromised First Data's Star network \u2013 a debit card processing system used by more than 5,000 banks. <\/p>\n

The attackers then removed or increased cash withdrawal and overdraft limits on legally opened credit and debit cards. "Money mules" were sent to withdraw funds from cash machines. <\/p>\n

The group used a combination of publicly available tools and custom-written malware to access banking systems \u2013 including "file-less" software that is stored in a computer's memory rather than its hard drive, where it can be more easily detected, according to Group-IB.<\/p>\n

In at least one instance, the group used the home computer of a Russian bank's system administrator to access its internal network, according to the report.<\/p>\n

"If someone is targeted by experts, that's very hard to protect against," Prof Curran said. "They're going to persist until they get into the computer."<\/p>\n

Other tactics included changing the servers used to infect banking systems' networks and using secure sockets layer (SSL) certificates \u2013 data files that verify a web browser's authenticity \u2013 that appeared to be issued by big names such as the Federal Reserve Bank. <\/p>\n

'The next targets'<\/h2>\n

In addition to money, the hackers were also after internal banking system documentation, such as administrator guides, internal instructions and transaction logs, according to the report.<\/p>\n

Documentation was stolen during MoneyTaker's attacks on the Russian Interbank payment system, which operates similarly to Swift. That documentation could be used "to prepare further attacks" on banks using the technology, according to Group-IB. <\/p>\n

OceanSystems' FedLink card-processing system, a wire transfer product used by more than 200 banks in the US and Latin America, was also compromised. <\/p>\n

"Banks are increasingly spending more on security, but the hackers only have to find one way in and they have to protect all the ways in," said Prof Curran. <\/p>\n

<\/a><\/strong> <\/a><\/p>\n

Original Article<\/a><\/p>\n

[contf] [contfnew] <\/p>\n

BBC<\/a><\/h5>\n

[contfnewc] [contfnewc] <\/p>\n

The post MoneyTaker hackers reportedly steal \u00a37.5m from ATMs<\/a> appeared first on News Wire Now<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Russian-speaking hackers are suspected of stealing nearly $1..<\/p>\n","protected":false},"author":1,"featured_media":34114,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[50],"tags":[],"class_list":["post-34113","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech"],"yoast_head":"\nMoneyTaker hackers reportedly steal \u00a37.5m from ATMs - Business News Report<\/title>\n<meta name=\"description\" content=\"Russian-speaking hackers are suspected of stealing nearly $1..\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"MoneyTaker hackers reportedly steal \u00a37.5m from ATMs - Business News Report\" \/>\n<meta property=\"og:description\" content=\"Russian-speaking hackers are suspected of stealing nearly $1..\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/\" \/>\n<meta property=\"og:site_name\" content=\"Business News Report\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Business-NewsReport-328225811095934\/\" \/>\n<meta property=\"article:published_time\" content=\"2017-12-12T22:02:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.bnreport.com\/wp-content\/uploads\/2017\/12\/99173219_039455678.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"infopal11\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@BNReport\" \/>\n<meta name=\"twitter:site\" content=\"@BNReport\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"infopal11\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/\"},\"author\":{\"name\":\"infopal11\",\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/#\\\/schema\\\/person\\\/19d1c5a2dd7f60584a09de4a7805d68f\"},\"headline\":\"MoneyTaker hackers reportedly steal \u00a37.5m from ATMs\",\"datePublished\":\"2017-12-12T22:02:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/\"},\"wordCount\":593,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.bnreport.com\\\/wp-content\\\/uploads\\\/2017\\\/12\\\/99173219_039455678.jpg\",\"articleSection\":[\"Tech\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/\",\"url\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/\",\"name\":\"MoneyTaker hackers reportedly steal \u00a37.5m from ATMs - Business News Report\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.bnreport.com\\\/wp-content\\\/uploads\\\/2017\\\/12\\\/99173219_039455678.jpg\",\"datePublished\":\"2017-12-12T22:02:05+00:00\",\"description\":\"Russian-speaking hackers are suspected of stealing nearly $1..\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.bnreport.com\\\/wp-content\\\/uploads\\\/2017\\\/12\\\/99173219_039455678.jpg\",\"contentUrl\":\"https:\\\/\\\/www.bnreport.com\\\/wp-content\\\/uploads\\\/2017\\\/12\\\/99173219_039455678.jpg\",\"width\":1024,\"height\":576},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629\",\"item\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"MoneyTaker hackers reportedly steal \u00a37.5m from ATMs\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/\",\"name\":\"Business News Report\",\"description\":\"Latest News on the World of Politics & Business\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/#organization\",\"name\":\"\u0628\u0632\u0646\u0633 \u0631\u064a\u0628\u0648\u0631\u062a \u0627\u0644\u0627\u062e\u0628\u0627\u0631\u064a\",\"url\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.bnreport.com\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/LOGO2.png\",\"contentUrl\":\"https:\\\/\\\/www.bnreport.com\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/LOGO2.png\",\"width\":200,\"height\":50,\"caption\":\"\u0628\u0632\u0646\u0633 \u0631\u064a\u0628\u0648\u0631\u062a \u0627\u0644\u0627\u062e\u0628\u0627\u0631\u064a\"},\"image\":{\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/Business-NewsReport-328225811095934\\\/\",\"https:\\\/\\\/x.com\\\/BNReport\",\"https:\\\/\\\/www.instagram.com\\\/business.newsreport\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/#\\\/schema\\\/person\\\/19d1c5a2dd7f60584a09de4a7805d68f\",\"name\":\"infopal11\",\"url\":\"https:\\\/\\\/www.bnreport.com\\\/en\\\/author\\\/infopal11\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"MoneyTaker hackers reportedly steal \u00a37.5m from ATMs - Business News Report","description":"Russian-speaking hackers are suspected of stealing nearly $1..","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/","og_locale":"en_US","og_type":"article","og_title":"MoneyTaker hackers reportedly steal \u00a37.5m from ATMs - Business News Report","og_description":"Russian-speaking hackers are suspected of stealing nearly $1..","og_url":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/","og_site_name":"Business News Report","article_publisher":"https:\/\/www.facebook.com\/Business-NewsReport-328225811095934\/","article_published_time":"2017-12-12T22:02:05+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/www.bnreport.com\/wp-content\/uploads\/2017\/12\/99173219_039455678.jpg","type":"image\/jpeg"}],"author":"infopal11","twitter_card":"summary_large_image","twitter_creator":"@BNReport","twitter_site":"@BNReport","twitter_misc":{"Written by":"infopal11","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/#article","isPartOf":{"@id":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/"},"author":{"name":"infopal11","@id":"https:\/\/www.bnreport.com\/en\/#\/schema\/person\/19d1c5a2dd7f60584a09de4a7805d68f"},"headline":"MoneyTaker hackers reportedly steal \u00a37.5m from ATMs","datePublished":"2017-12-12T22:02:05+00:00","mainEntityOfPage":{"@id":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/"},"wordCount":593,"commentCount":0,"publisher":{"@id":"https:\/\/www.bnreport.com\/en\/#organization"},"image":{"@id":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/#primaryimage"},"thumbnailUrl":"https:\/\/www.bnreport.com\/wp-content\/uploads\/2017\/12\/99173219_039455678.jpg","articleSection":["Tech"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/","url":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/","name":"MoneyTaker hackers reportedly steal \u00a37.5m from ATMs - Business News Report","isPartOf":{"@id":"https:\/\/www.bnreport.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/#primaryimage"},"image":{"@id":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/#primaryimage"},"thumbnailUrl":"https:\/\/www.bnreport.com\/wp-content\/uploads\/2017\/12\/99173219_039455678.jpg","datePublished":"2017-12-12T22:02:05+00:00","description":"Russian-speaking hackers are suspected of stealing nearly $1..","breadcrumb":{"@id":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/#primaryimage","url":"https:\/\/www.bnreport.com\/wp-content\/uploads\/2017\/12\/99173219_039455678.jpg","contentUrl":"https:\/\/www.bnreport.com\/wp-content\/uploads\/2017\/12\/99173219_039455678.jpg","width":1024,"height":576},{"@type":"BreadcrumbList","@id":"https:\/\/www.bnreport.com\/en\/moneytaker-hackers-reportedly-steal-7-5m-from-atms\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629","item":"https:\/\/www.bnreport.com\/en\/"},{"@type":"ListItem","position":2,"name":"MoneyTaker hackers reportedly steal \u00a37.5m from ATMs"}]},{"@type":"WebSite","@id":"https:\/\/www.bnreport.com\/en\/#website","url":"https:\/\/www.bnreport.com\/en\/","name":"Business News Report","description":"Latest News on the World of Politics & Business","publisher":{"@id":"https:\/\/www.bnreport.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.bnreport.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.bnreport.com\/en\/#organization","name":"\u0628\u0632\u0646\u0633 \u0631\u064a\u0628\u0648\u0631\u062a \u0627\u0644\u0627\u062e\u0628\u0627\u0631\u064a","url":"https:\/\/www.bnreport.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.bnreport.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.bnreport.com\/wp-content\/uploads\/2020\/12\/LOGO2.png","contentUrl":"https:\/\/www.bnreport.com\/wp-content\/uploads\/2020\/12\/LOGO2.png","width":200,"height":50,"caption":"\u0628\u0632\u0646\u0633 \u0631\u064a\u0628\u0648\u0631\u062a \u0627\u0644\u0627\u062e\u0628\u0627\u0631\u064a"},"image":{"@id":"https:\/\/www.bnreport.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Business-NewsReport-328225811095934\/","https:\/\/x.com\/BNReport","https:\/\/www.instagram.com\/business.newsreport"]},{"@type":"Person","@id":"https:\/\/www.bnreport.com\/en\/#\/schema\/person\/19d1c5a2dd7f60584a09de4a7805d68f","name":"infopal11","url":"https:\/\/www.bnreport.com\/en\/author\/infopal11\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.bnreport.com\/en\/wp-json\/wp\/v2\/posts\/34113","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bnreport.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bnreport.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bnreport.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bnreport.com\/en\/wp-json\/wp\/v2\/comments?post=34113"}],"version-history":[{"count":0,"href":"https:\/\/www.bnreport.com\/en\/wp-json\/wp\/v2\/posts\/34113\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.bnreport.com\/en\/wp-json\/wp\/v2\/media\/34114"}],"wp:attachment":[{"href":"https:\/\/www.bnreport.com\/en\/wp-json\/wp\/v2\/media?parent=34113"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bnreport.com\/en\/wp-json\/wp\/v2\/categories?post=34113"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bnreport.com\/en\/wp-json\/wp\/v2\/tags?post=34113"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}