Cybercrime ring steals up to $1.4 billion from banks around the world

WASHINGTON (REUTERS) - A multinational gang of cyber criminals has stolen as much as US$1 billion (S$1.4 billion) from as many as 100 financial institutions around the world in about two years, Russian computer security company Kaspersky Lab said on Saturday.

The company said it was working with Interpol, Europol and the authorities from different countries to try to uncover more details on what is being called an unprecedented robbery.

The gang, which Kaspersky dubbed Carbanak, takes the unusual approach of stealing directly from banks, rather than posing as customers to withdraw money from companies' or individuals' accounts. It said the gang included cyber criminals from Europe, including Russia and Ukraine, as well as China.

Carbanak used carefully crafted e-mails to trick pre-selected employees into opening malicious software files, a common technique known as spear phishing. They were then able to get into the internal network and track down administrators' computers for video surveillance.

In this way, Kaspersky said, the criminals learnt how the bank clerks worked and could mimic their activity when transferring the money.

In some cases, Carbanak inflated account balances before pocketing the extra funds through a fraudulent transaction. Because the legitimate funds were still there, the account holder would not suspect a problem.

Kaspersky said Carbanak also remotely seized control of ATMs and ordered them to dispense cash at a predetermined time, when a gang member would be waiting to collect the money.

"These attacks again underline the fact that criminals will exploit any vulnerability in any system," Mr Sanjay Virmani, director of Interpol Digital Crime Centre, said in a statement prepared by Kaspersky.

"It also highlights the fact that no sector can consider itself immune to attack and must constantly address their security procedures."

Join ST's Telegram channel and get the latest breaking news delivered to you.