(adsbygoogle = window.adsbygoogle || []).push({}); JPMorgan Chase network has been attacked a investigation by federal law enforcement in the US is under way. Attack on the network is meant to have been on going for months before the company located something in a network scan.
Infrastructure was attacked using custom coded bits of malware during the first stage to gain access. From that point onwards the attackers moved to zero day code designed just to attack the bank.
What striking is that at each hole the attackers started using the knowledge of the system to go deeper and deeper.
Atttack had dozens of layers spreading across the network, it unknown how far the attackers got.
A number of European banks earlier this year, suffered attacks just like JPMorgan has done with the techniques being same. The attack was rather consistent taking months to complete before all the pieces was in place.
Unknown how much data was stolen but it appears it was data on customer banking transactions. Attack did nothing to hurt the bank only to break into the system, so it unknown the goal tha hackers was aiming for.
Command and control network sent the data to bot servers which passed the information onwards to a Russian server.
Eastern European electronic crime rings have been using the techniques for years, with Chinease hackers looking to follow suit. Superior methods often belong to crime rings compared to the state-financed hackers.
Nobody is sure who the sponsor is for this attack.

Company has increased it spending to fight attacks to $250 Million in the 2014. JPMorgan Chase CEO Jamie Dimon told reporters on an earnings call year this the company had no plans to reduce spending but to keep increasing it.
Bloomberg broke the story so it unknown if it has any truth, Bloomberg is reporting up to 7 banks may have suffered the same fate.

Probably the hackers were trying to get some $$ out of it tbh lol

I wonder how it feels to be able to do these things.

Like anybody with a skill guessing.



Appears the attack was designed to learn and exploit the system over gain money. Likely the next series of attacks is going to be for personal gain.