New service to fight cybersecurity threats to African banks

April 2019 Cyber Security

Foregenix is launching a service to combat the new and growing breed of cyber-attacks on African banks. The global cybersecurity firm, which specialises in the financial services and has a regional hub in Johannesburg, is introducing the Foregenix Threat Sweep.

Based on Foregenix’s established Serengeti technology, the service cuts the dwell-time of attackers within an organisation to hours from an industry average of around 100 days.

The new service cuts through the noise and identifies latent threats in a matter of minutes. Threat Sweep is backed-up by a threat intelligence team and senior digital forensics and incident response analysts performing threat hunts on specific issues experienced within the sector. The combination of technical innovation and human elements mean threats are detected quickly and mitigated efficiently.

Among the rapidly emerging attacks Threat Sweep is aiming to combat is the surge in ATM cashout type attacks (FASTCash). These attacks on issuing banks or payment card processors exploit weak ­internal system architecture and security controls of processing switches (servers) and then use a small subset of cloned payment cards at ATMs to fraudulently withdraw large amounts of money in untraceable hard currency.

The CEO of Foregenix, Andrew Henwood explains: “ATM cashouts allow hackers to extract vast sums of money in less than 30 minutes by compromising the backend and eliminating the removal limits on these accounts. This is all done in an almost risk free manner. So it is essential to be extra vigilant and perform additional checks within the payment environment, even if there is no obvious breach as attackers typically lie dormant for months.”

Henwood adds: “As a PCI Forensic Investigator, we are seeing regular requests for assistance from organisations experiencing ATM cashout attacks. Previously, these were on the periphery but are now becoming a weekly phenomenon on some parts of the continent.”

The Threat Sweep service offers immediate response to this type of critical situation. It is offered for a fixed-time and cost for 30-days and most clients opt to extend into the Foregenix MDR service.

Henwood comments: ‘Unfortunately, in most of our forensic ­investigations, banks and organisations are failing to detect when their systems were initially compromised. From analysis of our casework we see 135 days elapsing before an alert is raised and by that point the hacker typically knows and understands the environment better than the IT administrators, they are well-established and have already harvested large amounts of valuable personal and financial data.

“Many organisations rely on the traditional security systems – firewalls, antivirus, patch management – but they are still being breached. With new threats emerging, our rapid response service meets an increasing need for the sector to accurately establish their threat and risk level and take appropriate action.”

For more information go to www.foregenix.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Five ransomware predictions for 2021
Issue 9 2020 , Cyber Security
How to stay ahead of cyber criminals and protect your data

Read more...
Striking the balance between customer privacy and intimacy
Issue 9 2020 , Cyber Security
While secure IT infrastructure is a key component to keeping customer data secure, customers expect more than adherence to regulations and the latest technologies to help protect their data from falling into the wrong hands.

Read more...
A good future for tech in 2021 and beyond
Issue 9 2020 , Cyber Security
The pandemic drove technology adoption in amazing ways; networking, cloud, security, collaboration, and other digital technologies all played a huge role in keeping the world running.

Read more...
Cyber-industry collaboration through AI
Issue 9 2020 , Cyber Security
SophosAI advances the practices and language that will transform the cybersecurity industry with much-needed transparency and openness.

Read more...
Shifting security to the edge
Issue 9 2020 , Cyber Security
As applications move to the cloud and networks become increasingly complex, organisations require a comprehensive security solution designed to protect the WAN edge.

Read more...
Why security integration is important
Issue 9 2020 , Cyber Security
Adrienne Campbell says the integration of physical and network security is important and offers eight reasons why.

Read more...
Ensure cybersecurity at the edge
Issue 9 2020 , Cyber Security
Organisations must be aware of the increased need to protect the edge of the network and prioritise cybersecurity before an attack happens.

Read more...
Protecting ICS and SCADA systems
Issue 9 2020 , Cyber Security
Check Point Software´s new rugged gateway secures industrial control systems and critical infrastructures against the most advanced cyber-threats.

Read more...
Cyber defence in an era of digital dependency
Issue 9 2020 , Cyber Security
Businesses across the globe have typically taken an immature approach to cybersecurity, believing that a firewall is an adequate fortress to defend their intellectual property.

Read more...
Improved resilience and simplicity
Issue 9 2020 , Cyber Security
Cisco helps its customers and partners to reimagine the way they work, with security innovations across its portfolio designed to offer greater agility, simplicity and resilience.

Read more...