Banks in Russia and Ukraine are under constant siege by hackers who, using complex next-generation tools, breach their authentication systems and then attack them with so-called ‘denial-of-service’ attacks.
The attack begins by disabling the Java authentication system and continues with a DDoS attack. The advantage of this attack technique is that the bank is occupied with the DDoS attack while criminals steal money from accounts. Additionally, clients whose money is being stolen cannot access their accounts during the attack. The attacks began in late 2009 and have been ongoing since then. Joe Stewart, a researcher at the security firm SecureWorks, stated that he has witnessed dozens of such cases during months of observing these attacks. (www.cert.hr)
