IMF 'suspended' World Bank links following hack attack
Spy on the wire
Customer Success Testimonial: Recovery is Everything
The International Monetary Fund (IMF) has reportedly become the target of a concerted hack attack.
The resulting breach was severe enough for the economic development agency to temporarily suspend network connections with the World Bank, as a precaution. The link was quickly restored.
According to internal emails leaked to Bloomberg the precautionary disconnection followed the detection of "suspicious file transfers". "[A] subsequent investigation established that a Fund desktop computer had been compromised and used to access some Fund systems. At this point, we have no reason to believe that any personal information was sought for fraud purposes."
The IMF reported told staff on or around 8 June that it planned to replace RSA SecurID tokens used for remote authentication. RSA last week publicly offered to replace two factor authentication token after defence contractor Lockheed Martin said it had come under attack from hackers using information gleaned from an earlier high-profile attack on RSA back in March.
However an IMF staffer told the New York Times that the attack on its systems is not linked to the earlier RSA breach. Unconfirmed reports suggest that the IMF was the target of a spear phishing attack designed to plant malware inside its systems.
If so - and it's a big if - then the IMF has come under the type of attack previously faced by both a French economics ministry and its Canadian counterpart over recent months. Both the Canadian and French hack coincided with international government leader conferences.
The IMF itself is saying little about the attack other than to confirm that it is under investigation. The motives, much less the identity of attackers, remain unclear.
David Beesley, managing director of security consultancy Network Defence, said that targeted (spear phishing) attacks of the type that might have been launched can be very tricky but not impossible to thwart.
"Spear phishing is difficult to defend against because it primarily targets users not PCs, and the information that attackers can gather from social networking sites makes the phishing emails look very convincing," Beesley said. "As we’ve seen, it makes these attacks effective against any size of organisation."
"Really, firms need to use a mix of user education and layered security solutions to defend themselves. Employees should be aware that even plausible-looking emails should be treated with suspicion, and IT teams should look at their AV and anti-spam solutions to try and stop malware propagating," he added. ®
COMMENTS
implemented email privacy and authentication
> Isn't it about time everyone implemented PGP or similar in their email systems as standard?
It won't happen because our various democratic governments won't be able to monitor our emails to protect us all from the terrorists.
--
They dined on mince, and slices of quince,
Which they ate with a runcible spoon;
And hand in hand, on the edge of the sand,
They danced by the light of the moon,
The moon,
The moon,
They danced by the light of the moon.
re: Any website can be hacked
@Keith T: It does not matter how tight security is. Any website can be hacked ..
I must disagree, there are degrees of insecurity. A Web facing server should run a minimalist system and connect to a backend using a secure channel, no credit cards or user information stored on the front end and full auditing and financial transactions done on a third system.
Simply ... wrong.
Servers have been running Unix since before Windows was thought of: how can it be "more tested?"
IT infrastructure monitoring strategies
What you need to know about cloud backup
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Customer Success Testimonial: Recovery is Everything
