Analysis of cyber attacks on banking systems

Abstract

The article discusses the main methods by which cybercriminals carry out attacks on financial organizations using ATM vulnerabilities (network attacks, blackbox attacks, exiting the user’s restriction of computer use by only one application (kiosk mode) and connecting to the hard drive). The main vulnerabilities of banking systems are analyzed, the results of Positive Technologies research on the percentage of ATMs exposed to the above vulnerabilities are described, and recommendations are made to increase the level of security of information systems of financial organizations. Various, including phishing attacks on the SWIFT (Society for Worldwide Interbank Financial Telecommunications) and AWP CBD (automated workplace of a Bank of Russia client) systems of the most dangerous criminal hacker groups: Cobalt, MoneyTaker and Silence, are considered.