Govt warns FIs of cyber espionage

The country’s all financial institutions (FIs) have been asked to take preventive measures in a bid to secure their online activities including financial transaction.

The government instruction came as infamous cyber espionage groups called Lazarus and Cobaltgoblin have successfully breached the FIs of Bangladesh, Malaysia, South Korea, Indonesia, the Philippines, China (Hong Kong) and Vietnam.

In a letter issued by Director of the Data Center and Cyber Security of Bangladesh Computer Council (BCC) Tarique M Barkatullah dated October 24 requested all the FIs to install new generation firewall with anti-Advanced Persistent Threat (APT), Threat Intelligence Service and genuine software to secure online activities.

The United States Computer Incidence Response Team (US CISCO) report says it has been able to monitor active APT actors in the region namely the infamous Lazarus group and Cobaltgoblin group that use Carbanak-style attacks.

The report said, "From spying, stealing and leaking state, military and trade secrets, cyber security researchers at Kaspersky Lab discovered that cybercriminals operating in the region now aim for monetary gain as they infect banks in the Asia Pacific region."

Meanwhile, the ETCISCO newsletter said active ATP groups have successfully breached the financial institutions in Bangladesh, Malaysia, South Korea, Indonesia, the Philippines, China (Hong Kong) and Vietnam.

According to a UNB story, Lazarus is the cyber gang believed to be behind massive breaches, it said adding Carbanak made headlines in 2014 for the $1 billion bank heists in Russia, Ukraine, Germany and China dubbed as 'The Great Bank Robbery'.