Tuesday

3rd Oct 2023

Cyber criminals steal millions from EU banks

  • Fraudsters initiated transfers totaling €35 million from 5,000 Dutch business accounts based in two banks in March. (Photo: UK Ministry of Defence)

Cyber attacks have siphoned off at least €60 million from personal and business accounts in 60 banks located in Europe, the United States, and Latin America.

Security firms Guardian Analytics and McAfee published the findings in a joint report called "Dissecting Operation High Roller" on Tuesday (26 June).

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

High-balance accounts in Italy, Germany and the Netherlands were the initial targets of the attacks before they spread out to the Americas.

The experts say at least €2 billion could have been stolen if the fraud campaign had demonstrated the same level of success against accounts based in The Netherlands.

In March alone, fraudsters initiated transfers totaling €35 million from 5,000 Dutch business accounts based in two banks.

The Guardian Analytics and McAfee study identified 60 servers processing thousands of attempted thefts that initially targeted consumers before moving onto businesses. Every class and size of financial institution was targeted.

In Italy, the accounts targeted held on average between €250,000 to €500,000. Hackers introduced a code in malware that transferred either a fixed percentage or a relatively small fixed amount onto a pre-paid debit card or bank account.

The system was able to bypass, in less than 60 seconds, physical authentication checks such as the smartcard reader common in Europe.

Account holders introduce or swipe their cards in the smartcard to generate security codes and pin numbers to access their accounts online.

"The defeat of two-factor authentication that uses physical devices is a significant breakthrough for the fraudsters. Financial institutions must take this innovation seriously, especially considering that the technique used can be expanded for other forms of physical security devices," say the researchers.

The same system of automated attacks in Italy then began to appear in Germany in January. Nearly €1 million was taken from a total of 176 accounts with average account balances nearing €50,000. The money was transferred to mule accounts in Portugal, Greece, and the United Kingdom.

In unrelated events also on Tuesday (26 June), a US sting operation arrested 24 people in the United States and abroad for buying and selling stolen credit card information.

The scam and thefts occurred in the United States, Canada and 11 European countries, reports the AFP.

Six people were arrested in the United Kingdom, two in Italy, and one each in Bulgaria, Germany and Norway.

The European Commission, for its part, says around one-third of EU citizens were banking online in 2010. The figure has most likely increased since.

It says that people's bank credentials are being sold traded by criminals in Europe for around €60 per account holder, and credit cards for as little as €1.

A European cyber crime centre should become operation in January 2013.

The centre, housed in the premises of Europol in The Hague, will be tasked to identify organised cyber-criminal networks and prominent offenders.

Hackers stole Van Rompuy's emails

Hackers last summer raided the emails of EU Council chief Herman Van Rompuy and 10 other senior EU officials.

Column

Will Poles vote for the end of democracy?

International media must make clear that these are not fair, democratic elections. The flawed race should be the story at least as much as the race itself.

Opinion

Orbán's 'revenge law' is an Orwellian crackdown on education

On Tuesday, the Hungarian parliament passed a troubling piece of legislation known by its critics as the 'revenge law', which aims to punish and intimidate teachers who dare to defy Viktor Orbán's regime. This law is a brutally oppressive tool.

Latest News

  1. EU ministers go to Kyiv to downplay fears on US, Slovak aid
  2. Hoekstra faces tough questioning to be EU Green chief
  3. Frontex shared personal data of NGO staff with Europol six times
  4. Why EU Commission dumped Google's favourite consultant
  5. Slovak's 'illiberal' Fico victory boosts Orbán, but faces checks
  6. European Political Community and key media vote This WEEK
  7. Is the ECB sabotaging Europe's Green Deal?
  8. The realists vs idealists Brussels battle on Ukraine's EU accession

Stakeholders' Highlights

  1. Nordic Council of MinistersThe Nordic Region is stepping up its efforts to reduce food waste
  2. International Medical Devices Regulators Forum (IMDRF)Join regulators, industry & healthcare experts at the 24th IMDRF session, September 25-26, Berlin. Register by 20 Sept to join in person or online.
  3. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  4. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA
  5. International Medical Devices Regulators Forum (IMDRF)Join regulators & industry experts at the 24th IMDRF session- Berlin September 25-26. Register early for discounted hotel rates
  6. Nordic Council of MinistersGlobal interest in the new Nordic Nutrition Recommendations – here are the speakers for the launch

Stakeholders' Highlights

  1. Nordic Council of Ministers20 June: Launch of the new Nordic Nutrition Recommendations
  2. International Sustainable Finance CentreJoin CEE Sustainable Finance Summit, 15 – 19 May 2023, high-level event for finance & business
  3. ICLEISeven actionable measures to make food procurement in Europe more sustainable
  4. World BankWorld Bank Report Highlights Role of Human Development for a Successful Green Transition in Europe
  5. Nordic Council of MinistersNordic summit to step up the fight against food loss and waste
  6. Nordic Council of MinistersThink-tank: Strengthen co-operation around tech giants’ influence in the Nordics

Join EUobserver

Support quality EU news

Join us