4 ms·
This is some real life swordfish shit right here. This is not some run of the mill trojan keylogger. Whoever wrote this had plenty of access and time to get the
by jtchang 10y ago
This is some real life swordfish shit right here. This is not some run of the mill trojan keylogger. Whoever wrote this had plenty of access and time to get the malware correct.
- anilgulecha 10y agoSomething this intricate had to have some testing -- My hypothesis is that they did a test heist for small amounts prior to the big one.
- yompers888 10y agoIs there a nation-state actor who would have cause to put forth these resources to disturb the Bangladeshi central bank?
- meowface 10y agoPure speculation, but impressive as this is, it feels just amateurish enough to not be a nation-state. They made some mistakes like typos in the sending address of the wire recipient, and also made the attack discoverable the night/morning after, when an employee noticed SWIFT reports weren't printing properly. I think they were probably just in it for the money.
- yompers888 10y agoOk, fair enough. I could have seen it being either way, but I've mostly only read the big reports about nation-state actors, so I'm probably biased to see it that way. As a separate note, state actors can be very amateurish. The Chinese did things, as disclosed by the Mandiant APT1 Report, like taunting users, using very non-native English phishing messages,and leaving plaintext signatures as a means of bragging.
- deleted 10y ago[deleted]
- mahyarm 10y agoIf you are fine with robbing a bank and for that amount wouldn't you?