The 21st Century Bank Job

Yes, I'm talking about how to hack a Bank!

Transcript

1. THE 21ST CENTURY BANK JOB @GEOVEDI
2. EVER THOUGHT ABOUT ROBBING A BANK?
3. JOHN DILLINGER KUSNI KASDUT OLD SCHOOL
4. HACKING A BANK IS EASY ..OR MAYBE NOT!!
5. MODERN BANK JOBS CASE STUDIES
6. CREDIT CARD FRAUD
7. ATM SKIMMING
8. SOCIAL ENGINEERING
9. & IT’S EASIER THEY ARE CLUELESS WHY TARGETING THE USERS? [MOST OF THE TIME]
10. HOW ABOUT HACKING?
11. Swordfish (2001)
12. INSIDE THE BANK’S IT SYSTEM
13. CORE TRADE FINANCE TREASURY DATA WAREHOUSING ANTI MONEY LAUNDRING REMITTANCE CRM COLLECTION SYSTEM ATM SWITCH INTERNET BANKING ISLAMIC BANKING MOBILE BANKING CARD MANAGEMENT
14. NETWORK OF TRUST EMPLOYEES MANAGEMENT GOVERNMENT VENDORS CUSTOMERS
15. STORYTELLING SESSION HOW WE COMPROMISED BANKS ON SOME PENTEST ENGAGEMENT
16. COMMON PROBLEMS PEOPLE PROBLEMS WEAK PASSWORDS LACK OF AWARENESS LACK OF SKILLS SYSTEM PROBLEMS OUTDATED SYSTEMS INSECURE CONFIGURATIONS INSECURE PROTOCOLS
17. MANAGEMENT PROBLEMS
19. MERCHANTS
20. ATM COMPROMISE
21. WTFKTHXBYE
23. WHO’S RESPONSIBLE?
24. BANK CUSTOMER According to Customer BANK CUSTOMER According to Bank RESPONSIBLE RESPONSIBLE RESPONSIBLE SECURITY RESPONSIBILITY
25. BANKS’ EFFORTS TO INCREASE THE SECURITY LEVEL
26. ENCRYPTION
27. TWO-FACTOR AUTHENTICATIONS
28. TWO-FACTOR AUTHENTICATIONS
29. REGULATION COMPLIANCE
30. REGULAR SECURITY ASSESSMENT
31. WHAT’S NEXT?
32. WHAT’S NEXT?
33. THANKS!
34. CREDITS: Photos: • [Page 01] http://www.flickr.com/photos/reddogfever/4580710899/ • [Page 02] http://www.flickr.com/photos/lanuiop/226760877/ • [Page 04] http://www.flickr.com/photos/deepblue66/132439533/ • [Page 05] http://www.flickr.com/photos/marcelnicolai/4600107436/ • [Page 09] http://www.flickr.com/photos/paulwatson/411792788/ • [Page 10] http://www.flickr.com/photos/jliba/3696592874/ • [Page 11] Swordfish Hack — http://www.youtube.com/watch?v=zfy5dFhw3ik • [Page 12] http://www.flickr.com/photos/skreuzer/354316778/ • [Page 13] http://www.flickr.com/photos/tim_d/184018928/ • [Page 14] http://www.flickr.com/photos/eskimoblood/2111672366/ • [Page 15] http://www.flickr.com/photos/beneathourfeet/2502755729/ • [Page 16] http://www.flickr.com/photos/formalfallacy/2057169454/ • [Page 16] http://www.flickr.com/photos/dolor_ipsum/3262262008/ • [Page 17] http://www.flickr.com/photos/24443965@N08/3460357646/ • [Page 23] http://www.flickr.com/photos/kk/4191131924/ • [Page 25] http://www.flickr.com/photos/ari/2347593532/ • [Page 27] http://www.infosurhoy.com/cocoon/saii/images/2010/03/01/photo4.jpg • [Page 28] http://en.wikipedia.org/wiki/File:CryptoCard_two_factor.jpg • [Page 29] http://blogs.ft.com/gapperblog/files/2008/03/bank-regulation.jpg • [Page 30] http://www.flickr.com/photos/dfarrell07/5013882149/ • [Page 31] http://www.flickr.com/photos/joshmt/2526552173/
35. @GEOVEDI CHECKOUT: http://slideshare.net/geovedi