Foregenix is launching a service to combat the new and growing breed of cyber attacks on African banks.
The global cyber security firm, which specialises in the financial services and has a regional hub in Johannesburg, is introducing the Foregenix Threat Sweep.
Based on Foregenix’s established Serengeti technology, the service cuts the dwell time of attackers within an organisation to hours from an industry average of around 100 days.
The new service cuts through the noise and identifies latent threats in a matter of minutes. Threat Sweep is backed-up by a Threat Intelligence Team and senior Digital Forensics and Incident Response analysts performing threat hunts on specific issues experienced within the sector. The combination of technical innovation and human elements mean threats are detected quickly and mitigated efficiently.
Among the rapidly emerging attacks Threat Sweep is aiming to combat is the surge in ATM cashout type attacks (FASTCash). These attacks on issuing banks or payment card processors exploit weak internal system architecture and security controls of processing switches (servers) and then use a small subset of cloned payment cards at ATMs to fraudulently withdraw large amounts of money in untraceable hard currency.
The CEO of Foregenix Andrew Henwood explains: “ATM cashouts allow hackers to extract vast sums of money in less than 30 minutes by compromising the backend and eliminating the removal limits on the these accounts. This is all done in an almost risk free manner. So it is essential to do be extra vigilant and perform additional checks within the payment environment, even if there is no obvious breach as attackers typically lie dormant for months.”
Henwood adds: “As a PCI Forensic Investigator, we are seeing regular requests for assistance from organisations experiencing ATM Cashout attacks. Previously, these were on the periphery but are now becoming a weekly phenomenon on some parts of the continent.”
The Threat Sweep service offers immediate response to this type of critical situation. It is offered for a fixed-time and cost for 30-days and most clients opt to extend into the Foregenix MDR service.
“Unfortunately, in most of our forensic investigations, banks and organisations are failing to detect when their systems were initially compromised,” Henwood says. “From analysis of our casework we see 135 days elapsing before an alert is raised and by that point the hacker typically knows and understands the environment better than the IT administrators, they are well-established and have already harvested large amounts of valuable personal and financial data.
“Many organisations rely on the traditional security systems – firewalls, antivirus, patch management – but they are still being breached. With new threats emerging, our rapid response service meets an increasing need for the sector to accurately establish their threat and risk level and take appropriate action.”