hacker documents show nsa tools for breaching global money transfer system
Last Updated : GMT 09:07:40
Egypt Today, egypt today
Egypt Today, egypt today
Last Updated : GMT 09:07:40
Egypt Today, egypt today

Hacker documents show NSA tools for breaching global money transfer system

Egypt Today, egypt today

Egypt Today, egypt today Hacker documents show NSA tools for breaching global money transfer system

- File picture
Hong Kong/San Francisco - Arab today

Documents and computer files released by hackers provide a blueprint for how the US National Security Agency (NSA) likely used weaknesses in commercially available software to gain access to the global system for transferring money between banks, a review of the data showed.

On Friday, a group calling itself the Shadow Brokers released documents and files indicating NSA had accessed the SWIFT money-transfer system through service providers in the Middle East and Latin America. That release was the latest in a series of disclosures by the group in recent months. 

Matt Suiche, founder of cybersecurity firm Comae Technologies, wrote in a blog post that screen shots indicated some SWIFT affiliates were using Windows servers that were vulnerable at the time, in 2013, to the Microsoft exploits published by the Shadow Brokers. He said he concluded that the NSA took advantage and got in that way.

"As soon as they bypass the firewalls, they target the machines using Microsoft exploits," Suiche told Reuters. Exploits are small programs for taking advantage of security flaws. Hackers use them to insert back doors for continued access, eavesdropping or to insert other tools.

"We now have all of the tools the NSA used to compromise SWIFT (via) Cisco firewalls, Windows," Suiche said.

Reuters was not able to independently verify the authenticity of the documents released by the hackers. Microsoft acknowledged the vulnerabilities and said they had been patched. Cisco Systems Inc has previously acknowledged that its firewalls had been vulnerable.

Cisco and the NSA did not reply to requests for comment. Belgium-based SWIFT on Friday downplayed the risk of attacks employing the code released by hackers and said it had no evidence that the main SWIFT network had ever been accessed without authorization.

It was possible that the local messaging systems of some SWIFT client banks had been breached, SWIFT said in a statement, which did not specifically mention the NSA.

Breach of firewalls

A PowerPoint presentation that was part of the most recent Shadow Brokers release indicates the NSA used a tool codenamed BARGLEE to breach the SWIFT service providers' security firewalls.

The NSA's official seal appeared on one of the slides in the presentation, although Reuters could not independently determine the authenticity of the slides.

The slide referred to ASA firewalls. Cisco is the only company that makes ASA firewalls, according to a Cisco employee who spoke on condition of anonymity. ASA stands for Adaptive Security Appliance and is a combined firewall, antivirus, intrusion prevention and virtual private network, or VPN.

Documents included in the Shadow Brokers release suggest that the NSA, after penetrating the firewall of the SWIFT service providers, used Microsoft exploits to target the computers interacting with the SWIFT network, Comae Technologies' Suiche said.

The Al Quds Bank for Development and Investment, for example, was running a Windows 2008 server that at the time was vulnerable to newly disclosed Windows exploits, he said.

Microsoft late on Friday said it had determined that prior patches to dozens of software versions had fixed the flaws that apparently were exploited by nine of the NSA programs. Four of the vulnerabilities were blocked by comprehensive updates on March 14. That left only older, unsupported versions of Windows operating systems and Exchange email servers at risk to three of the newly released exploits, the company said.

Earlier Friday, Microsoft had said the company had not been warned by the government or other outsiders about the stolen programs.

Microsoft declined to say how it learned of the exploits without outside help. The company's security systems are capable of detecting attacks against customers, and Microsoft in the past has monitored discussion about exploits on the Internet and also hired former intelligence agency veterans to help it devise programming to protect its software from encroachment.

The NSA targeted nine computer servers at a SWIFT contractor, Dubai-based service bureau EastNets, according to the documents. The US intelligence agency then used lines of code to query the SWIFT servers and Oracle databases handling the SWIFT transactions, according to the documents.

 

 

Source: Timesofoman

egypttoday
egypttoday

Name *

E-mail *

Comment Title*

Comment *

: Characters Left

Mandatory *

Terms of use

Publishing Terms: Not to offend the author, or to persons or sanctities or attacking religions or divine self. And stay away from sectarian and racial incitement and insults.

I agree with the Terms of Use

Security Code*

hacker documents show nsa tools for breaching global money transfer system hacker documents show nsa tools for breaching global money transfer system



GMT 21:06 2017 Monday ,01 May

Will Smith at all-star Jazz Day in Cuba

GMT 06:25 2017 Monday ,27 November

Bali raises volcano alert to highest level

GMT 12:45 2018 Monday ,26 November

Israeli forces close entrance of village in Ramallah

GMT 12:14 2018 Monday ,08 October

HM King congratulates Ugandan President

GMT 13:49 2017 Thursday ,17 August

Alibaba posts 94% surge in quarterly profit

GMT 08:47 2017 Saturday ,10 June

CDD responds to 236 various incidents

GMT 00:31 2015 Saturday ,16 May

Canada plans 30% CO2 emissions cut by 2030

GMT 03:31 2017 Wednesday ,22 February

‘Man-made’ climate change a major woman’s problem

GMT 10:42 2017 Thursday ,16 November

Algeria FM leaves Cairo following tripartite meeting

GMT 11:08 2017 Tuesday ,03 October

Moscow, Riyadh willing to boost cooperation

GMT 08:40 2017 Thursday ,31 August

Bahrain Bourse daily trading performance

GMT 18:23 2017 Wednesday ,29 March

Ghazali's ALTARSHEED

GMT 08:22 2012 Wednesday ,04 July

Berenice Marlohe in racy shoot

GMT 15:47 2012 Friday ,20 January

2012 Honda Civic

GMT 10:37 2012 Friday ,13 July

2013 Ford Mustang

GMT 13:17 2011 Monday ,17 October

Hip hop stars to take centrestage at Yas Island

GMT 12:19 2017 Thursday ,27 July

Libya asks Italy to combat human trafficking

GMT 13:11 2017 Wednesday ,04 October

Jacques Dubochet (Switzerland), Joachim Frank (US)

GMT 12:26 2017 Thursday ,02 November

CAPRICORN (December22nd-January20th)

GMT 22:21 2017 Tuesday ,19 December

Haifa Wahby apologized for not receiving award

GMT 14:56 2017 Tuesday ,17 October

Palestinian cabinet decries Sinai terror attack
 
 Egypt Today Facebook,egypt today facebook  Egypt Today Twitter,egypt today twitter Egypt Today Rss,egypt today rss  Egypt Today Youtube,egypt today youtube  Egypt Today Youtube,egypt today youtube

Maintained and developed by Arabs Today Group SAL.
All rights reserved to Arab Today Media Group 2021 ©

Maintained and developed by Arabs Today Group SAL.
All rights reserved to Arab Today Media Group 2021 ©

egypttoday egypttoday egypttoday egypttoday
egypttoday egypttoday egypttoday
egypttoday
بناية النخيل - رأس النبع _ خلف السفارة الفرنسية _بيروت - لبنان
egypttoday, Egypttoday, Egypttoday