Digital Banking & Cyber Crime

Digital technology in the 21st Century has revolutionised economic and social interaction. It has transformed business, the way we educate ourselves, buying and selling products and services. Also, financial services and banking.

Internet connectivity and use is growing and the number of individual users worldwide is now over 5 Billion, which is over 63% of the global population and continues to grow. This has enabled a Fintech revolution which is transforming how we spend money and share data between buyers, sellers and their intermediaries. 

The implementation of innovative technology has made an opportunity for criminals to find ways to exploit and steal from users. This is especially so in the financial services sector where numerous new online account services are available. At the same time, many new Digital Banks have emerged which operate entirely online. Criminal hackers are certainly fully aware of these new digital services to take advantage of insecure financial data systems. 

Digital banks face rapidly escalating threats as technological developments in cyber crime make it easier than ever for financial criminals to commit fraud.

Cyber attacks are becoming more sophisticated thanks to artificial intelligence (AI) and self-learning malware. Phishing attacks meanwhile prey on vulnerable and naïve customers, and for cybercriminals, ransomware is the most lucrative type of attack. Unfortunately, governments and police services have responded slowly to this new, 4th Industrial Digital Revolution. And many of their operations do not have the IT skills and technology to deal with these new crimes. As the crimes, threats and actions frequently take place outside of policing’s national boundaries this cyber crime inadvertently, now has similarities to ancient piracy, where national governments could claim that the crime and criminals were outside their national responsibility, even if they, where sometimes one of the governments funding the pirates. 

The global cost of cyber crime continues to increase and the intensification of these criminal action hackers means that the cost of cyber-crime could reach $10.5 trillion by 2025. 

Cyber crime costs include damage and destruction of data, stolen money, lost productivity, theft of intellectual property, theft of personal and financial data, embezzlement, fraud, post-attack disruption to the normal course of business, forensic investigation, restoration and deletion of hacked data and systems, and reputational harm.
However, in the last decade Western governments are often claiming that their national crime rate is reducing, but this is reporting is not taking cyber-crime into the national picture, which if it did, then national and global crime would be seen to be significantly increasing.

Additionally, it is in the nature of large commercial firms for cyber responsibilities to be split between different departments, which often cause difficulties in understanding and prioritising threats and responding to them. 
More widely, the inter-connectedness of the financial sector means that successful attacks on smaller firms or third party supply chains can significantly affect the wider market. In these circumstances vendors, suppliers, customers and our other colleagues are all critical components of a successful business, but come with risks, and successful attacks against these often perceived weaker links could have an indirect but significant impact on the chain. 

Cyber threat actors have a global reach and cyber threats need to be considered through a global lens. 

High-profile Data Breaches & Vulnerabilities 

Banks are not reporting the full extent of cyber attacks to regulators for fear of punishment or bad publicity as some bank executives and providers of security systems and they are not alone in their reluctance to disclose every cyber attack.

According the British government data, of the five million fraud and 2.5 million cyber-related crimes occurring annually in the UK, only 250,000 are being reported.

In November of 2016 five Russian banks had been under intermittent cyber-attack for two days, said the country's banking regulator. The state-owned Sberbank was one target of the prolonged attacks and hackers sought to overwhelm the websites of the banks by deluging them with data in what is known as a Distributed Denial of Service (DDoS) attack.

SWIFT, the messaging network that connects the world's banks, says it has identified new hacks targeting its members, and it is warning them to beef up security in the face of "ongoing attacks." It did not name the banks affected. The warning follows cyber attacks on banks in Bangladesh, Vietnam, the Philippines and Ecuador in which malware was used to circumvent local security systems, and in some cases, steal money.

  • An attack on Bangladesh's central bank yielded $101 million.
  • Ecuador's Banco del Austro was hit for $12 million.

As cyber threats are an ever-present threat and continue to evolve, it is essential for banks, police and government to build their cyber-risk analysis part of their business and organisations knowledge so that effective mitigation strategies can be developed and put in place. 

In 2022 there is a real requirement for more effective sharing of IT and Fintech know-how  across the government, police and banking sectors is required. Most cyber crime originates from China, North Korea and Russia where it can be difficult to identify hackers and where local police are unlikely to apprehend them.

Banks will need to work collaboratively with governments and industry bodies to share effective strategies. There also needs to be continued work to educate the public on preventative measures, but the buck stops with the banks who will need to ensure they implement security models that ensure maximum protection for them and their customers.

TMB:    Int Accounting Bulletin:    Datareportal:    Cybersecuritventures:   Royal Holloway:     BBA

Cyber Crime Journal:      Refinitiv:     Guardian:    JICRAR:     Information Age

You Might Also Read: 

Cyber Security In Fintech:
 

« Apple Patches Serious Security Flaws With iOS Update
Understanding Fake News »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Wizard Computing

Wizard Computing

Wizard Computer Services is a full service IT solutions provider that offers managed services, consultation, installation, and support to small and large businesses in New England.

Senetas

Senetas

Senetas is a leading developer and manufacturer of certified high-assurance encryption solutions, dedicated to protecting network transmitted data without compromising performance.

Arista Networks

Arista Networks

Arista Networks is an industry leader in data-driven, client to cloud networking for large data center, campus and routing environments.

IP Performance

IP Performance

IP Performance Limited is a leading supplier of customised network infrastructure and security solutions.

Magic Software Enterprises

Magic Software Enterprises

Magic provide Mobile Device Management (MDM) for Secure Enterprise Mobility. Magic MDM overcomes the challenges of mobile device management security by protecting all of your devices, data and content

Lutech

Lutech

Lutech is an Italian ICT engineering and services company. Business solution areas include cyber security.

Ezenta

Ezenta

Ezenta is a Danish IT security consulting firm.

Ogasec

Ogasec

Ogasec is a cybersecurity company formed by the merger between Aker and N-Stalker in 2017. Solutions include Security & Connectivity Networking, Application Security, and Managed Security Services.

RATEL (SRB-CERT)

RATEL (SRB-CERT)

RATEL has been appointed as the National Center for the Prevention of Security Risks in ICT systems of the Republic of Serbia (SRB-CERT).

ClearBlade

ClearBlade

ClearBlade is the Edge Computing software company enabling enterprises to rapidly engineer and run secure, real-time, scalable IoT applications.

redGuardian

redGuardian

redGuardian is a DDoS mitigation solution available both as a BGP-based service and as an on-premise platform.

Cytelligence

Cytelligence

Cytelligence is a cyber security consulting company with deep expertise in Cyber Breach Response, Cyber Breach Investigations, and Digital Forensics.

SEEK

SEEK

SEEK create world-class technology solutions to address the needs of job seekers and hirers across multiple sectors including cybersecurity.

Berkeley Varitronic Systems (BVS)

Berkeley Varitronic Systems (BVS)

Berkeley Varitronics Systems is an engineering think tank delivering custom wireless RF engineering products and solutions including cyber security.

Iris Powered by Generali

Iris Powered by Generali

Iris Powered by Generali is an identity theft resolution provider. Our offering combines expert assistance and support with user-friendly identity protection technology.

Helix Security Services

Helix Security Services

Helix Security provides IT & information security consultancy to government and businesses across New Zealand.