Thursday

26th Apr 2018

Cyber criminals steal millions from EU banks

  • Fraudsters initiated transfers totaling €35 million from 5,000 Dutch business accounts based in two banks in March. (Photo: UK Ministry of Defence)

Cyber attacks have siphoned off at least €60 million from personal and business accounts in 60 banks located in Europe, the United States, and Latin America.

Security firms Guardian Analytics and McAfee published the findings in a joint report called "Dissecting Operation High Roller" on Tuesday (26 June).

Thank you for reading EUobserver!

Subscribe now for a 30 day free trial.

  1. €150 per year
  2. or €15 per month
  3. Cancel anytime

EUobserver is an independent, not-for-profit news organization that publishes daily news reports, analysis, and investigations from Brussels and the EU member states. We are an indispensable news source for anyone who wants to know what is going on in the EU.

We are mainly funded by advertising and subscription revenues. As advertising revenues are falling fast, we depend on subscription revenues to support our journalism.

For group, corporate or student subscriptions, please contact us. See also our full Terms of Use.

If you already have an account click here to login.

High-balance accounts in Italy, Germany and the Netherlands were the initial targets of the attacks before they spread out to the Americas.

The experts say at least €2 billion could have been stolen if the fraud campaign had demonstrated the same level of success against accounts based in The Netherlands.

In March alone, fraudsters initiated transfers totaling €35 million from 5,000 Dutch business accounts based in two banks.

The Guardian Analytics and McAfee study identified 60 servers processing thousands of attempted thefts that initially targeted consumers before moving onto businesses. Every class and size of financial institution was targeted.

In Italy, the accounts targeted held on average between €250,000 to €500,000. Hackers introduced a code in malware that transferred either a fixed percentage or a relatively small fixed amount onto a pre-paid debit card or bank account.

The system was able to bypass, in less than 60 seconds, physical authentication checks such as the smartcard reader common in Europe.

Account holders introduce or swipe their cards in the smartcard to generate security codes and pin numbers to access their accounts online.

"The defeat of two-factor authentication that uses physical devices is a significant breakthrough for the fraudsters. Financial institutions must take this innovation seriously, especially considering that the technique used can be expanded for other forms of physical security devices," say the researchers.

The same system of automated attacks in Italy then began to appear in Germany in January. Nearly €1 million was taken from a total of 176 accounts with average account balances nearing €50,000. The money was transferred to mule accounts in Portugal, Greece, and the United Kingdom.

In unrelated events also on Tuesday (26 June), a US sting operation arrested 24 people in the United States and abroad for buying and selling stolen credit card information.

The scam and thefts occurred in the United States, Canada and 11 European countries, reports the AFP.

Six people were arrested in the United Kingdom, two in Italy, and one each in Bulgaria, Germany and Norway.

The European Commission, for its part, says around one-third of EU citizens were banking online in 2010. The figure has most likely increased since.

It says that people's bank credentials are being sold traded by criminals in Europe for around €60 per account holder, and credit cards for as little as €1.

A European cyber crime centre should become operation in January 2013.

The centre, housed in the premises of Europol in The Hague, will be tasked to identify organised cyber-criminal networks and prominent offenders.

Hackers stole Van Rompuy's emails

Hackers last summer raided the emails of EU Council chief Herman Van Rompuy and 10 other senior EU officials.

Feature

Hungary activists defiant after 'Soros Mercenaries' attack

Immediately after Orban's landslide victory in April, a list of so-called 'Soros mercenaries' was published by pro-government media. Those on it - mostly human rights defenders, activists and Orban critics - are now anxious but vow to continue.

News in Brief

  1. UN expects over $4bn in pledges for Syria
  2. Commission wants more public data made available for reuse
  3. Study: Brexit will hit all European farmers
  4. European media face rise in 'verbal violence' from politicians
  5. Greenland PM to keep power despite poll slump
  6. Commissioner optimistic on FYROM name solution
  7. Italian court keeps NGO migrant rescue boat docked
  8. German Jews warned not to wear skullcap in public

Stakeholders' Highlights

  1. Sustainable Energy Week 2018"Lead the Clean Energy Transition"- Register and Join Us in Brussels from 5 to 7 May
  2. EU Green Week 2018Green Cities for a Greener Future. Join the Debate in Brussels from 22 to 24 May
  3. Nordic Council of Ministers12 Recommendations for Nordic Leadership on Climate and Environment
  4. Macedonian Human Rights MovementOxford Professor Calls for an End to the Anti-Macedonian Name Negotiations
  5. ACCAPeople Who Speak-Up Should Feel Safe to Do So
  6. Mission of China to the EUProgress on China-EU Cooperation
  7. Nordic Council of MinistersWorld's Energy Ministers to Meet in Oresund in May to Discuss Green Energy
  8. ILGA EuropeParabéns! Portugal Votes to Respect the Rights of Trans and Intersex People
  9. Mission of China to the EUJobs, Energy, Steel: Government Work Report Sets China's Targets
  10. Martens CentreJoin Us at NET@WORK2018 Featuring Debates on Migration, Foreign Policy, Populism & Disinformation
  11. European Jewish CongressKantor Center Annual Report on Antisemitism Worldwide - The Year the Mask Came Off
  12. UNICEFCalls for the Protection of Children in the Gaza Strip

Latest News

  1. Whistleblowers could be enforcers of rule of law in Europe
  2. EU shelves Macron idea for 'European Darpa'
  3. Don't play EU 'games' with military HQs, Italian admiral says
  4. EU had a plan for Jordan - now it's time to make it work
  5. Time for EU to take charge of global health research agenda
  6. EU in race to set global Artificial Intelligence ethics standards
  7. Juncker delays air quality action due to busy agenda
  8. Spain makes bid for EU naval HQ