Software, printer problems delayed discovery of Bangladesh heist


  • TECH
  • Thursday, 17 Mar 2016

Startling find: A glitch with a printer that was set up to automatically print all Swift wire transfers was discovered.

DHAKA: The cyber thieves who stole US$81mil (RM330.4mil) from Bangladesh Bank appear to have hid their tracks by manipulating a central bank computer and printer that connect to the Swift messaging system to hide evidence of the heist, according to a report filed with local police.

The report, filed by two central bank officials on Tuesday evening, said that a computer the bank uses to order Swift wire transfers was manipulated so that authorities could not see records of outgoing wire transfer requests or receipts confirming that they had been received.

Details about the issues with the computer and printer were among the first clues to surface as to how the attack was carried out.

The computer is supposed to keep those records so they can be easily reviewed by bank staff, according to the report.  

The officials saw the first signs that something was off on Feb 5, when they noticed a glitch with a printer that is set up to automatically print all Swift wire transfers.

When they identified that the previous day's transactions had not been printed, they attempted to manually print them but were unable to do so, according to the report, which was reviewed by Reuters.

One official asked that the printer be repaired before leaving the office that day, which was a Friday and the first day of the weekend in Bangladesh. Other bank employees later decided to wait until the next day to fix it, according to the report.

When the officials tried to access the computer the bank uses to send Swift messages, they got messages saying a file NROFF.EXE "is missing or changed.”

They were eventually able to access the Swift messaging system on Feb 8 and print out messages after obtaining clearance to use other means to access the system from senior bank officials.

When they printed the Swift messages there were three from the New York Fed seeking information about several suspicious transactions, which flagged them to the heist that this week resulted in the ouster of the central bank's governor.

A representative from Brussels-based Swift, a bank-owned cooperative that runs a secure private messaging system widely used for requesting money transfers, declined comment on Wednesday.

Swift last week issued a statement saying that it was working with Bangladesh's central bank "to resolve an internal operational issue at the central bank." It added that "Swift’s core messaging services were not impacted by the issue and continued to work as normal." —  Reuters


Get 30% off with our ads free Premium Plan!

Monthly Plan

RM13.90/month
RM9.73 only

Billed as RM9.73 for the 1st month then RM13.90 thereafters.

Annual Plan

RM12.33/month
RM8.63/month

Billed as RM103.60 for the 1st year then RM148 thereafters.

1 month

Free Trial

For new subscribers only


Cancel anytime. No ads. Auto-renewal. Unlimited access to the web and app. Personalised features. Members rewards.
Follow us on our official WhatsApp channel for breaking news alerts and key updates!
   

Next In Tech News

Iran restores access to WhatsApp and Google Play after they were banned amid protests
OpenAI unveils artificial intelligence that can 'reason' through math and science problems
Court orders recall of Signify lighting products over patents, Seoul Semiconductor says
Telegram and WeChat first to initiate licensing to operate in Malaysia
Japan Airlines delays flights after cyberattack
Japan airlines experiencing issues due to cyberattack
The war on wildfires is going high-tech
Opinion: Why I’m getting rid of my smartwatch
How smartphones powered the AI boom in 2024
JAL's systems back to normal after cyberattack delayed flights

Others Also Read