₦airaland Forum

Search all the homes as welll. Anything to fish out these fools.

Too bad for the innocent citizens though.

Great News. About them they got a share of what they've been bargaining for.

The idea of doing video calls to say 10people at a time on some 4" android device doesn't seem quite like a "nice experience" to me.

Good one though.

In early 2010, Nish Bhalla sat down at his computer with one objective: steal a huge amount of money from a bank.

It wasn't a typical heist. Bhalla is the chief executive of Security Compass, a company that tests security systems at banks, retailers, energy companies and other organizations with sensitive data. His clients -- including the bank branch in the United States that he targeted in his 2010 attack -- pay him to break into their systems.

It can be easier than most people think. The alleged thieves who made headlines last week for their $45 million bank heist used a similar type of attack that "created" money out of nowhere.

Bhalla talked CNNMoney through his caper. Here, in four easy steps, is how he made himself into a millionaire.
Step one, get access. Bhalla had one big advantage on actual thieves: His client gave him access to the bank's internal network. For real-world crooks, there are some surprisingly easy ways to get in.

It's possible, Bhalla said, to gain access in some places simply by logging on to the bank's wireless network -- an amenity more and more banks are providing as a service to customers. Once you're on the bank's Wi-Fi, the internal and external networks are frequently not segregated enough. It can be possible to fool the bank's other computers into thinking that your computer is a bank computer, a process known as "arp spoofing."

Another on-ramp: Someone posing as a janitor could insert a thumb drive into a teller's system and reboot it using a new operating system, which would enable them to access the hard drive of the teller's system. From there, user names and passwords are often readable.

Because he could simply log straight into his client's network, Bhalla and his assistants skipped the "get physical access" step and dove straight into finding the money.

Step two, start exploring. Bhalla used "sniffer" software, available online for free, to map out which of the bank's systems were connected to each other.

Then he "flooded" switches -- small boxes that direct data traffic -- to overwhelm the bank's internal network with data. That kind of attack turns the switch into a "hub" that broadcasts data out indiscriminately.

The machines that the tellers use quickly became Bhalla's prime target. Again, the sniffer software was deployed to look for login information and passwords in the data flood. Eventually, one hit. He was inside a teller's machine.

Step three, move up the ranks. Amazingly, the information being sent between the tellers' computers and the branch's main database was not encrypted. This meant passwords and bank account numbers were all out in the open.

Step four, cash in. Rather than steal money from depositors' accounts, Bhalla just invented a new account for himself.
"We went into the database where the accounts are and set up an account with $14 million," Bhalla explained. "We just created $14 million out of thin air."

If he wanted to, he could have walked into any bank branch, transferred the money to an offshore account, and never have had to work again.

Instead, he went to an ATM to print out a record of his ill-gotten wealth.

"The bank executives were extremely surprised," Bhalla said. "Their faces were shocked."

The bank promptly deleted Bhalla's bounty, he said, and took steps to shore up its network.

In the heist that came to light last week, federal officials say the thieves hacked into networks at firms that process transactions for pre-paid debt cards and created accounts with high spending limits. From there, it was just a matter of making physical debt cards for those accounts and going around to ATMs to withdraw the cash.

"They just updated the database with that debit-card information," Bhalla said. "That's how simple it was."

In many cyber bank heists, including the recent $45 million scam, it's hard to pin down who is ultimately liable for any losses.

It's typically not individual customers. U.S. law protects consumer checking and savings accounts from losses stemming from fraud. Business accounts, though, have fewer protections.

Bhalla said some financial institutions have insurance to cover the losses -- but he noted that insurance companies are reluctant to issue policies with high coverage limits because the risks in this area area still poorly understood.

In the end, he said the losses are likely born by a combination of the company, insurance firms and governments.

https://l1.yimg.com/bt/api/res/1.2/eJBosFgpSop6CnXGk4c9Og--/YXBwaWQ9eW5ld3M7Y2g9MzQxO2NyPTE7Y3c9NjIwO2R4PTA7ZHk9MDtmaT11bGNyb3A7aD0zNDE7cT04NTt3PTYyMA--/http://l.yimg.com/os/publish-images/finance/2013-05-15/8d542823-46e1-474f-bc87-fe0083d37da9_receipt.jpg

Culled from: http://finance.yahoo.com/news/security-compass-stole-14-million-100700004.html

mikeyhernadez: Pukes┄

The thread is a mess. Rat meat? African Rat meet? Sewer rat? Street Rat? African Giant Rat?

Yuck!

^^^

Awesome news. I've always been an avid lover of anything with a start and finish line.

Nancy boys?

What a pose.

ItsModella: Your ban is even short. Maclatunji dey ban like mad man, have you not seen people he banned till 2106?

That's some serious "Jail Tenure". Thank God for Alt. accounts.

[size=5pt]So much for 1059359 members. [/size]

Idowuogbo: Lmao! Ur own no carry weight na! Dat ewure musulumi dey ban till Allah shows up and begs him to release you.

I wanna punch that guy so hard in the nuts though.

Idowuogbo:

See me o

There I were browsing Nairaland.com, Upon a sudden I see a new Frontpage thread "Girls Face Jail For Mixing Islamic Prayer With Dancing To Pop Song". I clicked, read through , got enraged and "fired a small gun".

Heck, I didn't even know it was in "Islam for Muslims" else I'd hit that "back" button in 0.02milliseconds.

See me, see maclatunji o.

Banned by maclatunji in Islam for Muslims for Posting offensive comments.. Ban expires on 10:37pm On May 17

About time I stayed off this site.

truelove.com:
your talking trash, is bank of industry on Nigeria's stock exchange?

Again, you display more of your folly. Why not ask why the CBN hasn't been listed on the NSE.

That's all he said?

Scarpon: biko which one is bank of industry??

truelove.com:
the company or firm is not popular. he should have refused the deal, but maybe because his getting broke and need some qick cash, he has no option but to accept the deal

truelove.com:
don jazzy got loya milk ambassador, which is a popular milk company in nigeria. some folks laughed at jazzy. but now dbanj got ambassador from an unregonised bank, wey no get branch and some folks are shouting "aja nla".SMH

Really? Like Really?? These posts are coming from supposed Nigerians?

Seriously, Nigerian Youths. SMH*

Enlighten yourselves, dimwits - http://www.boinigeria.com/about.php

adexsimply: you guys shuld learn how to read!!! the BR3ASTS are not gone!!!

Forget most of the folks on these forum. Once they see a FrontPage thread, First thing on their mind is hit the "Reply" button and be the first in line to drop a comment.

Damn.

Has nigeria even reached 3G limits yet?

What a waste of my time.

Yikes!

How did this get to the front page?

What till the illuminati experts see this thread.

adaobi123: the video reminds me of beyonce's 'crazy in love'

okay song though

Oh yeah, that's another good song from her, before she transformed to "Mrs Carter".

ItsModella: don't like it, ghen ghen is a Nigerian expression.

After the first chapter or so, the lyrics become horrible, but well, these days we just groove to the beat and forget the lyrics, innit?

A Nigerian expression meaning? I'm just hearing of it.

https://www.youtube.com/watch?v=-lso0SC1pZU

Some good Samaritan sent that to me. I love her voice - it's got a nice "deep note" to it.

What a choice for a title though. "ghen ghen", what's that? chinese?

Nice song though.

Hmmm. One moment.

You don't just copy stuff and post them here.

Try any of these on a Nigerian Carrier first. Like boarding a Dana plane and asking to view the cockpit before takeoff.

And I'm yet to get over my S3.

But good for them both. No issues whatsoever between them.

It's too early for me to be reading this sorta crap.

What a healthy dose of sport. Bulls vs Heat.

Nothing's coming between me and this! I want to see the end already!

ItsModella: and then it ends with "Nairaland can never be the same"....too much jokes

About time a book on the trials and travails of this site be launched. What have we not seen, From the "Garri" wars to this.

ItsModella: hahahahehehe!!! I've watched this so many times..."In a world where chaos thrives supreme, 1 man, 21 rules...in the blockbuster movie RULE 17.." epic

The expression on Seun's face in that picture makes it even more epic!

2ndOGA: https://quicklol.com/wp-content/uploads/2013/04/pissing-in-fountain-gif-animation.gif

Hilarious!

Link to the exact post:
https://www.nairaland.com/1284692/striking-down-rule-17/11#15652667

adaobi123: ^^^^^ was it you that made it ?

No, found it on one of the "rules debate" threads.

Nairalanders never cease to amaze.