Audacious cyber heist took place in India: hackers stole 250 million rupees

CarderPlanet

Professional
Messages
2,556
Reputation
7
Reaction score
591
Points
83
They managed to pull it off without any noise or dust, and when the fact of the attack was noticed, it was already too late.

In the Indian city of Thana, a major cybercrime occurred. Unknown hackers gained access to one of the escrow accounts of the national bank, where the money of local construction companies was stored, and stole about 250 million Indian rupees (approximately 275 million rubles) from there.

An escrow account is opened with a third party, in this case a bank, for temporary storage of money until the transaction between the two parties is completed.

According to the city police, who are investigating the case, hackers were able to break into the payment gateway of the target company and gain access to its database. By manipulating this database, cybercriminals managed to somehow significantly increase the balance on the aforementioned account and steal money by making many small transactions to different bank accounts, so that the movement of funds was more difficult to track.

Employees of the company discovered violations in their debit and credit accounts on April 14 of this year. "After a thorough investigation, the company's management found out that their financial portal was hacked," the police said.

The most interesting thing in this story is that a few days later, hackers once again turned their fraudulent scheme, thereby further increasing the losses of the construction company.

An officer from the Srinagar police Station said that hackers created four fictitious companies that were used as intermediaries for transferring funds. Some of these transactions were halted after complaints were made to the National Payments Corporation of India, but by then most of the transfers had already been made.

The police are conducting an investigation to identify the perpetrators, and the discovered vulnerabilities in the banking system will contribute to strengthening the cybersecurity of Indian enterprises in the future.
 
Top