Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

Researchers at Cardiff University have uncovered a flaw in HSBC's online banking security process that has left over three million customer accounts vulnerable to attack over the last two years.

The researchers found that anyone using the attack would have guaranteed access to an account within nine tries, The Guardian reports.

Professor Antonia Jones, the computer scientist who led the research team told The Guardian: "As long as this flaw exists, customers are at risk. For banks or institutions that are making huge amounts out of their customers not to protect them is pretty scandalous."

HSBC, meanwhile, says it will review its security procedures in light of the disclosure, but described the vulnerability as "a supposed flaw" which it had never seen criminals use.

It added that the attack was "extremely sophisticated" would have to be very focussed on one individual, would therefore be unlikely to be particularly profitable, and thus was an unattractive approach.

In a statement, it said: "Online fraud via HSBC's internet banking system is substantially lower than the market average and we are satisfied our customers are adequately protected."

However, the other security experts warn that if the attack were to be automated, accounts would be very vulnerable. The Cardiff researchers add that once the loophole is spotted, it could be used to access accounts very simply. ®

Agentless Backup is Not a Myth