How Citigroup Hackers Easily Gained Access

[Daniel]

"Hackers who stole the personal details of more than 200,000 Citigroup customers 'broke in through the front door' using an extremely simple technique. It has been called 'one of the most brazen bank hacking attacks' in recent years. And for the first time it has been revealed how the sophisticated cyber criminals made off with the staggering bounty of names, account numbers, email addresses and transaction histories. They simply logged on to the part of the group's site reserved for credit card customers and substituted their account numbers ? which appeared in the browser's address bar ? with other numbers. It allowed them to leapfrog into the accounts of other customers, with an automatic computer program letting them repeat the trick tens of thousands of times."

Daniel Reviewed by Daniel on 15th Jun 2011. How Citigroup Hackers Easily Gained Access "Hackers who stole the personal details of more than 200,000 Citigroup customers 'broke in through the front door' using an extremely simple technique. It has been called 'one of the most brazen bank hacking attacks' in recent years. And for the first time it has been revealed how the sophisticated cyber criminals made off with the staggering bounty of names, account numbers, email addresses and transaction histories. They simply logged on to the part of the group's site reserved for Rating: 5

[Nitish]

seriously? banking websites are this much insecure?

[Daniel]

There is no facepalm big enough to express my feeling at that hack. I'm sure they paid good money to "security professionals" to set that up too.