This article is from the source 'guardian' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.
You can find the current article at its original source at http://www.theguardian.com/uk-news/2013/sep/13/cybergang-hacked-santander-london-bank
The article has changed 5 times. There is an RSS feed of changes available.
| Version 3 | Version 4 |
|---|---|
| Cybergang foiled after allegedly hacking into London bank | Cybergang foiled after allegedly hacking into London bank |
| (5 days later) | |
| Police have foiled a plot to steal millions of pounds after a gang allegedly took control of a bank's computer remotely. | Police have foiled a plot to steal millions of pounds after a gang allegedly took control of a bank's computer remotely. |
| Scotland Yard described the cyber-attack on a Santander branch in Surrey Quays shopping centre, south-east London, as the most sophisticated case of its kind that police had encountered. | Scotland Yard described the cyber-attack on a Santander branch in Surrey Quays shopping centre, south-east London, as the most sophisticated case of its kind that police had encountered. |
| A man posing as a maintenance engineer is said to have fitted a keyboard video mouse device (KVM) to a computer in the branch, allowing transmission of the complete desktop contents of the bank computer over the network. | A man posing as a maintenance engineer is said to have fitted a keyboard video mouse device (KVM) to a computer in the branch, allowing transmission of the complete desktop contents of the bank computer over the network. |
| Police said the men were about to be in a position to execute their operation when the plot was foiled and multimillion-pound losses were prevented. The bank said no money was ever at risk. | Police said the men were about to be in a position to execute their operation when the plot was foiled and multimillion-pound losses were prevented. The bank said no money was ever at risk. |
| Twelve men were arrested on Thursday on suspicion of conspiracy to steal from Santander after a long-term, intelligence-led operation by Scotland Yard's central e-crime unit (PCeU), working with the banking industry. Detective Inspector Mark Raymond, of PCeU, said: "This was a sophisticated plot that could have led to the loss of a very large amount of money from the bank, and is the most significant case of this kind that we have come across." | Twelve men were arrested on Thursday on suspicion of conspiracy to steal from Santander after a long-term, intelligence-led operation by Scotland Yard's central e-crime unit (PCeU), working with the banking industry. Detective Inspector Mark Raymond, of PCeU, said: "This was a sophisticated plot that could have led to the loss of a very large amount of money from the bank, and is the most significant case of this kind that we have come across." |
| A 34-year-old man was arrested in Vauxhall, south London, and 11 men aged 23 to 50 were arrested in Hounslow, west London. Addresses were searched in Westminster, Hounslow, Hillingdon, Brent and Richmond, and in Slough where property was seized. | A 34-year-old man was arrested in Vauxhall, south London, and 11 men aged 23 to 50 were arrested in Hounslow, west London. Addresses were searched in Westminster, Hounslow, Hillingdon, Brent and Richmond, and in Slough where property was seized. |
| A Santander spokesman said none of its staff was involved in the plot. "Santander was aware of the possibility of the attack connected to the arrests," he said. "The attempt to fit the device to the computer in the Surrey Quays branch was allegedly undertaken by a bogus maintenance engineer pretending to be from a third party. | A Santander spokesman said none of its staff was involved in the plot. "Santander was aware of the possibility of the attack connected to the arrests," he said. "The attempt to fit the device to the computer in the Surrey Quays branch was allegedly undertaken by a bogus maintenance engineer pretending to be from a third party. |
| "It failed and no money was ever at risk. No member of Santander staff was involved in this attempted fraud. We are pleased that we have been able, through the robustness of our systems, to prevent the fraud and help the police gather the evidence they needed to make the arrests." | "It failed and no money was ever at risk. No member of Santander staff was involved in this attempted fraud. We are pleased that we have been able, through the robustness of our systems, to prevent the fraud and help the police gather the evidence they needed to make the arrests." |
| Dr Eerke Boiten, fromsenior lecturer at the University of Kent's interdisciplinary centre for cyber security research, said an iKVM, which would need to be fitted inside the computer, would have been able to send information over the internet. "It captures all the information that goes to the screen, keyboard and mouse. If you manage to get it installed inside the computer, it gives you a way of contacting the device through a remote computer," Boiten said. | Dr Eerke Boiten, fromsenior lecturer at the University of Kent's interdisciplinary centre for cyber security research, said an iKVM, which would need to be fitted inside the computer, would have been able to send information over the internet. "It captures all the information that goes to the screen, keyboard and mouse. If you manage to get it installed inside the computer, it gives you a way of contacting the device through a remote computer," Boiten said. |
| "This is what people use for controlling a big server remotely. You basically can control a computer inside that bank branch. With one such device you can do as much damage as an individual teller can, within the bank." | "This is what people use for controlling a big server remotely. You basically can control a computer inside that bank branch. With one such device you can do as much damage as an individual teller can, within the bank." |
| He said that because of the potential for fraud, bank branches would typically limit access to the internet and have a very strong firewall to prevent computers being remotely accessed. The number of people arrested suggested a sophisticated operation bent on getting around this. | He said that because of the potential for fraud, bank branches would typically limit access to the internet and have a very strong firewall to prevent computers being remotely accessed. The number of people arrested suggested a sophisticated operation bent on getting around this. |
| "This is not just one guy trying to install this thing and see if he can get through to the internet," said Boiten. | "This is not just one guy trying to install this thing and see if he can get through to the internet," said Boiten. |
| Our editors' picks for the day's top news and commentary delivered to your inbox each morning. | Our editors' picks for the day's top news and commentary delivered to your inbox each morning. |