- Okay, next, let's talk about vulnerable business processes.
- So, Business Process Compromise, or BPC,
- targets the unique processes
- or the systems facilitating those processes
- to covertly manipulate them, typically, for financial gain.
- So, what we're talking about here is a hacker
- entering a system and spending some time
- to actually get a lay of the land,
- look at what processes are there,
- how they can exploit them,
- very covertly, for some type of monetary or financial gain.
- So, once a foothold is gained within the enterprise,
- attackers will more laterally and quietly, alright?
- So that's kind of the key takeaway here.
- They're going to be very covert,
- where as much as possible, right?
- They're going to quietly study those systems
- and those processes over time.
- Intimate knowledge of processes and so forth
- are developed over time that make detection difficult.
- So, that can really be pointed to internal processes, right?
- They're going to disrupt some type of internal process
- or a target's interaction with outsider
- or third party systems,
- so let's go ahead and take a look at this in more detail
- with an actual situation that happened a few years ago.
- There was a bank in Bangladesh that was
- the target of hackers, so that bank actually interacted
- with the Federal Reserve Bank of New York,
- so they're the two pieces here of the puzzle.
- The hacker was able to infiltrate
- and get into the systems in the Bank of Bangladesh.
- During that period of time, they implanted malware,
- and from there, they were able to basically
- inject themselves into communication
- with the Bank of New York, so they issued
- some fraudulent requests to the Bank of New York, right?
- And they did this at the end of the month
- to make detection more difficult,
- because there's a lot of end of month processes,
- so what they did was send electronic requests
- for the federal bank to start wiring transactions,
- millions of dollars worth, to banks across Asia.
- So, there was a lot of different banks spread out
- all over the place, and also tampered with
- the printing system, to make that detection
- much more difficult.
- And the loss in this specific scenario was $81 million
- were actually lost or stolen
- before that attack was actually discovered,
- so as you can see, the hackers can get it covertly.
- They can spend some time, learn intimate processes,
- understand how different parties will interact,
- use malware, right?
- They'll implant malware on that system,
- inject themselves into the communication
- between those two parties,
- time it so that disruption is minimal
- and detection is very hard,
- and then they'll use that, in this specific example,
- to wire money to other banks throughout southeast Asia
- they also had a foothold in,
- and they would extract that money from.
- So, again, not an insignificant attack.
- $80 million plus was lost,
- and this is really just one of a number
- of different types of attacks that happen yearly
- throughout the world, so it's a major problem
- that can go unnoticed for long periods of time.