Hackers tried to steal nearly $1B from Bangladesh's central bank, got away with $81M
spellchek, spellcheck, spellchekc http://arstechnica.com/... http://twitter.com/... Raju Narisetti / @raju : What a caper: Bangladesh Central Bank finds missing $100 million: a cyberheist spanning at least four countries http://www.wsj.com/... @WSJ
Context & Ripple Effects
The WSJ's report landed weeks before the full anatomy of the heist emerged: Reuters traced the intrusion to second-hand $10 switches linking SWIFT-connected computers and no firewall at Bangladesh Central Bank, while researchers showed the thieves used malware to subvert the SWIFT interbank messaging network itself, prompting an emergency patch. A later BBC investigation attributed the operation to North Korean hackers who moved $81M of a planned $951M out of the bank's New York Fed account before a typo stopped the rest.
First-order effects
- Bangladesh Central Bank is out $81M with recovery efforts spanning at least four countries where funds were laundered through casinos and casinos' intermediaries.
- SWIFT must patch its messaging software and reassure member banks that its network — long treated as trusted plumbing — can still be subverted by malware on end-user machines.
Second-order effects
- Banks worldwide must audit their local SWIFT terminal setups — firewalls, network segregation, cheap commodity switches — because the Ecuador case showed the same playbook worked against Banco del Austro, which lost $9M via fraudulent Wells Fargo transfer messages.
- SWIFT's warning that a further commercial-bank attack was part of 'a wider highly adaptive campaign' pushes member banks toward treating interbank messaging as an active threat channel rather than authenticated trust.
Third-order effects
- If the pattern holds, correspondent banking consolidates around institutions with hardened payment operations, since smaller central banks and commercial banks prove they cannot secure SWIFT endpoints themselves.
- State-attributed cybertheft of central bank reserves becomes a recognized category of financial risk, forcing regulators to treat payment-messaging security as systemic infrastructure rather than each bank's private problem.
The trend: Interbank payment messaging is shifting from assumed-trust plumbing to contested attack surface, as state-linked crews probe SWIFT-connected banks one institution at a time.