A bank was recently hit by an attack. Private customer data is used to trick them via a phishing campaign!
We never repeat it enough. Our digital data is very sensitive and care should always be taken. A bank’s customers found out as a new phishing campaign was spotted. These fraudulent emails serve install a remote access trojan called BitRAT on the victim’s machines. Here is the whole story!
To read > Private conversations listened to by hackers thanks to the Google Home assistant
Colombian bank customers hacked
It is a Colombian cooperative bank that was recently hacked, allowing hackers to collect customer personal information. Cybersecurity company Qualys is behind this discovery of the database dump with 418,777 records obtained through the exploitation of SQL injection flaws.
Among the information recovered, we are talking about Cédula numbers[noteidentitydocumentavailabletoColombiancitizens)emailaddressesfirstandlastnamestelephonenumberspaymentrecordssalariesandaddressesInotherwords[ndlrdocumentd’identitédontdisposentlescitoyenscolombiens)lesadressesemailnomsetprénomsnumérosdetéléphoneenregistrementdepaiementssalairesetadressesAutantdirea gold mine for hackers.
A phishing campaign launched by hackers
For the moment, it is not known if this stolen information has been shared online, on the darknet for example. With this data, the hackers organized a phishing campaign with very convincing fake emails to trick victims into opening Excel attachments.
This Excel file is configured to retrieve a run BitRAT on compromised machines.
BitRAT, malware sold on some low-visibility forums for around $20, has several functions to steal data, harvest credentials, download software or mine cryptocurrency without the knowledge of the victims.
Given the scale of this attack, although it affects Colombian citizens, it is still useful to specify to avoid to open attachments of suspicious emails. Attacks can come from anywhere online!
