Ransomware: 1.6 Million XRP Requested at a Bank

 

This is a local news site - CBC - which was one of the first to relay this news . Apparently, hackers would have managed to get hold of sensitive information , such as customer identities , account numbers , passwords , security issues and answers , up to social security numbers and balances. present on the accounts concerned .

The attackers would have been heard by sending an email to both banks (no details on who would have received this email, nor on the exact content.). In this email, the hackers explain how they were able to exploit the security flaws of the two banks . They apparently used the algorithm to obtain account numbers , and that would have been enough to impersonate customers who forgot their password. From there, they could reset the secret question as well as its answer.

"They gave too many permissions to half-identified accounts, which allowed us to capture all this information. » Extract from hackers email

Within this email was the claims of hackers: the equivalent of 1 million dollars in XRP , otherwise all pirated information would be disseminated.

"These profiles will be posted on fraud forums, as well as to the community of fraudsters [...] if we do not get this payment before May 28, 2018, 11:59" Excerpt from hacker email.

In order to prove the seriousness of their attack , the hackers allegedly shared information identifying two Canadians , a BMO customer and a Simplii customer . Apparently, the leak of information has already begun, as CBC News confirms.

"CBC News got a list that ran online, containing personal information from 100 BMO customers, including extensive personal information, including addresses, phone number, date of birth, and social security number. CBC News has joined some of these individuals, and many have confirmed the veracity of this information. " Excerpt from the article CBC News

It seems that the information is being shared, the deadline has indeed passed, and the two banks had confirmed that they would not cooperate with the attackers .

"Our habit is not to pay the fraudsters. We are focused on protecting and supporting our customers. " Declaration of BMO

The two banks are currently reaching out to all affected customers , and have stated that they will block all accounts reached , offering these accounts a thorough follow-up (obviously free), and pledging to return any funds that might eventually to be stolen . Yet, according to some articles that are starting to appear , some customers are still waiting for the refunds they were promised for yesterday.

This attack could continue to talk about her. Indeed, stealing a credit card number - for example - can be lucrative, but solutions can quickly be put in place, and the card is quickly unusable. On the other hand, when someone puts their hands on all of your data (date of birth, Social Security number, financial details ...) it is then possible to impersonate your identity . In this case, correcting the shot will be much more tedious.

So, big banks, safer than crypto? Obviously, this is becoming more and more questionable ...