How Hackers Steal Money From Bank Accounts in 2017
Hackers can take advantage of a weakness in SS7 (Signalling System 7), the core signalling protocol in fixed & mobile telecommunications networks, that could enable them to steal data, eavesdrop, intercept text messages, track people’s locations and swindle money from bank accounts.
The security of the design of SS7 (Signalling System 7) is based entirely on trust.
AnonHQ.com reports:
The SS7 refers to the Common Channel Interoffice Signalling 7 (CCIS7) or the Signalling System 7 (SS7). The SS7 is the protocol in the mobile phones that checks and monitors how the text messages and calls are governed and exchanged by mobile phones.
These days, most of the banks offer a two-factor authentication, where the customers receive a one time temporary password (OTP). It is to be used after entering the regular ID and password for undertaking bank transactions.
If someone is capable of accessing the customers’ text message by hacking the vulnerabilities of SS7, they gain access to the text messages and OTPs. The hacking is done at the level of the telecom companies, and there isn’t much that the customers and the banks can do in this regard to prevent or counter the attack.
And, this is exactly what has happened.
According to Suddeutsche Zeitung, the aforementioned German newspaper, hackers were able to attack SS7 in January 2017, and thus, swindled money from the accounts of bank customers. The newspaper has reported the modus operandi of the hackers.
They first, through phishing attacks, gained access to the primary login credentials of their victims. Afterwards, they attacked the SS7 to transact money from the accounts.
One of the main telecom companies affected by the January attack was O2-Telefonica. The attack meant that the incoming text messages with the OTPs were diverted to the hackers, who in turn, used them to pull money from the accounts of the victims.
According to the director of telecoms security at Positive Technologies, Michael Downs, the future of 4G and 5G networks aren’t secure. Going forward, these vulnerabilities can lead to severe damages as a lot more devices will have telecommunication capabilities with the advent of the Internet of Things (IoT).
Telecom companies need to take immediate action and prevent such breaches from happening again.
Article Source: http://yournewswire.com/hackers-steal-money-bank-accounts/
Check Out Our New Mobile Apps available on Google Play Store here: https://play.google.com/store/apps/developer?id=Buddylist+Co.
My YouTube Channel: https://www.youtube.com/seekingthetruth101
Join our YouTube Collab Network : https://tv.buddylist.co
Add me up on Facebook if you like: https://www.facebook.com/joshwho1
Find me on Steemit Here: https://steemit.com/@truthseeker101
You can also find me on Buddylist: https://www.buddylist.co/truthseeker
Fan Funding can be accepted on Patreon or my Bitcoin Wallet. You can visit my profile here: https://www.patreon.com/truthseeker
My Bitcoin Wallet Address: 17S5o2Thyqcw9TqtFyQAQdAtjSwJJ95rcE
Join the ScaleLab Multi Channel Network and Start making more money with your YouTube channel today. https://goo.gl/b5ahvk
Copyright Disclaimer Under Section 107 of the Copyright Act 1976, allowance is made for "fair use" for purposes such as criticism, comment, news reporting, teaching, scholarship, and research. Fair use is a use permitted.
"Fair Use" guidelines: www.copyright.gov/fls/fl102.html
Banks seem to have no choice but to look for a solution(maybe a new platform) that will lead to less exploits
HTTPS protocol operates on top of whatever hardware protocol is carrying it. A flaw in the underlying protocol could not compromise HTTPS.