The Financial Supervisory Commission (FSC) on Thursday shed further light on information security shortcomings at Far Eastern International Bank (遠東商銀) that led to what could have been a US$60 million cyberheist.
The lender’s systems were breached because it did not complete required standard operating procedures, the commission said, citing findings from a preliminary investigation shortly after the hack was reported.
The bank had failed to abide by the principal of least privilege, a fundamental concept in information security entailing that user accounts should be given the minimum level of clearance to perform the tasks that they have been assigned.
Instead, the bank’s system administrators granted more “superuser” accounts than necessary out of day-to-day convenience, the commission said.
That made it easier for hackers to compromise the system, as they had more targets to infiltrate to gain high-level access on the system.
In addition, the lender did not have adequate network segmentation for their connection node to the Society for Worldwide Interbank Financial Telecommunication (SWIFT) messaging system, which is used by financial institutions to send and receive financial transaction information across the globe.
While guidelines required network segmentation for both workstation computers and servers, the bank only had fulfilled the requirement for its workstations, the commission said.
In the absence of network segmentation, the hackers were able to distract the bank with attacks to its system’s running services — such as online banking, ATMs and credit cards — while their intended target was the lender’s connection to the SWIFT system, the commission said, adding that lapses in internal control measures, such as transaction approvals, also slowed detection of the cyberattack.
Criminal Investigation Bureau section chief Chiu Shao-chou (邱紹洲) yesterday told a news conference in Taipei that Sri Lankan police arrested two of the five suspects allegedly involved in the cyberheist and that 99.74 percent of the lost money had either been recovered or at least frozen.
Stephen Garrett, a 27-year-old graduate student, always thought he would study in China, but first the country’s restrictive COVID-19 policies made it nearly impossible and now he has other concerns. The cost is one deterrent, but Garrett is more worried about restrictions on academic freedom and the personal risk of being stranded in China. He is not alone. Only about 700 American students are studying at Chinese universities, down from a peak of nearly 25,000 a decade ago, while there are nearly 300,000 Chinese students at US schools. Some young Americans are discouraged from investing their time in China by what they see
MAJOR DROP: CEO Tim Cook, who is visiting Hanoi, pledged the firm was committed to Vietnam after its smartphone shipments declined 9.6% annually in the first quarter Apple Inc yesterday said it would increase spending on suppliers in Vietnam, a key production hub, as CEO Tim Cook arrived in the country for a two-day visit. The iPhone maker announced the news in a statement on its Web site, but gave no details of how much it would spend or where the money would go. Cook is expected to meet programmers, content creators and students during his visit, online newspaper VnExpress reported. The visit comes as US President Joe Biden’s administration seeks to ramp up Vietnam’s role in the global tech supply chain to reduce the US’ dependence on China. Images on
New apartments in Taiwan’s major cities are getting smaller, while old apartments are increasingly occupied by older people, many of whom live alone, government data showed. The phenomenon has to do with sharpening unaffordable property prices and an aging population, property brokers said. Apartments with one bedroom that are two years old or older have gained a noticeable presence in the nation’s six special municipalities as well as Hsinchu county and city in the past five years, Evertrust Rehouse Co (永慶房產集團) found, citing data from the government’s real-price transaction platform. In Taipei, apartments with one bedroom accounted for 19 percent of deals last
Taiwan Transport and Storage Corp (TTS, 台灣通運倉儲) yesterday unveiled its first electric tractor unit — manufactured by Volvo Trucks — in a ceremony in Taipei, and said the unit would soon be used to transport cement produced by Taiwan Cement Corp (TCC, 台灣水泥). Both TTS and TCC belong to TCC International Holdings Ltd (台泥國際集團). With the electric tractor unit, the Taipei-based cement firm would become the first in Taiwan to use electric vehicles to transport construction materials. TTS chairman Koo Kung-yi (辜公怡), Volvo Trucks vice president of sales and marketing Johan Selven, TCC president Roman Cheng (程耀輝) and Taikoo Motors Group