Bancomext

lazarus.day

Bancomext appears in reporting on 2018 Mexican banking and wire-transfer payment-system incidents, where attackers were discussed in the context of compromise paths involving concentrators, servers, developers, contractors, and internal banking networks. The incident was later included in U.S. Justice Department and UN-linked reporting on DPRK/RGB-associated financial cyber operations spanning SWIFT-enabled bank theft attempts, ATM cash-outs, cryptocurrency activity, and laundering of cyber-enabled proceeds.

CISSM Cyber Events Database (copy exported 21 Apr 2023, via github.com/holisticinfosec/CISSM-EDA)

Hackers have attempted to steal money from Bancomext, Mexico's government-run export bank, causing the lender to suspend operations in its international payment platform.

UN Panel of Experts S/2019/691

Annex 21: Suspected DPRK cyber-attacks on financial institutions (including banks and cryptocurrency exchanges) investigated by the Panel. A. Banks. Attempted theft of 110M USD from Bancomext

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Reported: 2018-01; Victims: Bancomext; Motivations: FinancialGain; Sectors: Finance; Countries: Mexico

US court filing via CourtListener RECAP: United States v. Hyok

Overt Act No. 10: On January 9, 2018, having gained unauthorized access to Bancomext’s computer network at an earlier date, the hackers conducted false and fraudulent wire transfers totaling approximately $110 million to bank accounts in the Republic of Korea, and then deployed malware on more than 400 of Bancomext’s computers. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]

Jan 2018 Mexico Attempted theft of 110M USD from Bancomext

On January 9, 2018, having gained unauthorized access to Bancomext's computer network at an earlier date, the hackers conducted false and fraudulent wire transfers totaling approximately $110 million to bank accounts in the Republic of Korea