Security News > 2020 > February > Attacking the Organism: Financial Services

As advanced as security is in the financial industry, clearly there's still some catching up to do.

Another big problem is simply the range of motivations for attacking large financial services companies.

The attack itself was due to a misconfigured service outside AWS. Though millions of records were compromised, including account and Social Security numbers, none of them appears to have been used for financial gain.

The group changed the DNS registrations for all 36 of the bank's properties, rerouting all traffic to a counterfeit site that exactly replicated the bank's online services.

All this goes to show how crazy the security picture is for financial services companies.

News URL

http://feedproxy.google.com/~r/Securityweek/~3/4cEC4PrJeNI/attacking-organism-financial-services