Far Eastern International Bank · 2017-10
Far Eastern International Bank was targeted in an October 2017 cyber-enabled heist that abused systems connected to the SWIFT network and attempted unauthorized overseas transfers, with McAfee reporting spear-phishing, backdoor malware, credential harvesting, scheduled tasks, and endpoint-security disruption. BAE Systems linked the intrusion to Lazarus tools and Hermes ransomware, assessing the ransomware activity as likely distraction or cover while bank-fraud operations, internal reconnaissance, credential use, SMB-based lateral movement, and network encryption occurred.
Far Eastern International Bank · 2017-10-09
A hacking gang abuses the SWIFT banking network to steal $60 million after planting malware on a Taiwanese bank's servers. Two arrests are made in Sri Lanka related to the attack. The Lazarus Group is believed to be behind the attack.
Compromise of Far Eastern International Bank · Oct 2017
A threat actor compromised the networks of Far Eastern International Bank in Taiwan, allowing them to transfer US$60 million to accounts based in the United States, Cambodia, and Sri Lanka using the SWIFT network.
Attempted theft of $60M from Far Eastern International Bank; all but $500,000 recovered by the bank · Oct 2017
Annex 21: Suspected DPRK cyber-attacks on financial institutions (including banks and cryptocurrency exchanges) investigated by the Panel. A. Banks. Attempted theft of $60M from Far Eastern International Bank; all but $500,000 recovered by the bank
Far Eastern International Bank · 2017-10
Reported: 2017-10; Victims: Far Eastern International Bank; Motivations: FinancialGain; Sectors: Finance; Countries: Taiwan
Taiwan Heist: Lazarus Tools and Ransomware (Far Eastern International Bank, Taiwan) · 16 October 2017
These include both known Lazarus group tools, as well as a rare ransomware variant called 'Hermes'. [...] In one of these cases we and other researchers were able to observe infrastructure in North Korea controlling the malware. [...] The attack this month on Taiwanese Far Eastern International Bank has some of the hallmarks of the Lazarus group
Far Eastern International Bank fraudulent wire transfers · On October 3, 2017
Overt Act No. 9: On October 3, 2017, having gained unauthorized access to Far Eastern International Bank’s computer network at an earlier date, the hackers conducted false and fraudulent wire transfers totaling approximately $60.1 million to bank accounts in Sri Lanka, Cambodia, and the United States. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]
대만의 원동국제상업은행서 SWIFT 통해 6천만 달러 도난 · 2017-10-10
attribution sentence(s): 50만 달러 빼고 전부 회수 성공...일각에서는 북한 의심 | 당시 북한의 라자루스(Lazarus)라고 추정되는 단체는 SWIFT 메시지 네트워크를 통해 뉴욕의 연방준비은행에 있는 방글라데시중앙은행 계좌로부터 약 9억 5천 1백만 달러를 훔치려고 시도했다가 8천 1백만 달러를 탈취하는 데 성공했다. | 일각에서는 지난 방글라데시중앙은행 사건을 인용해 “이번 대만 은행 사건에도 북한이 개입되었을 가능성을 염두에 두고 수사를 진행해야 한다”고 주장하고 있다.