The use of this site and the content contained therein is governed by the Terms of Use. When you use this site you acknowledge that you have read the Terms of Use and that you accept and will be bound by the terms hereof and such terms as may be modified from time to time.
All text, graphics, audio, design and other works on the site are the copyrighted works of nasscom unless otherwise indicated. All rights reserved.
Content on the site is for personal use only and may be downloaded provided the material is kept intact and there is no violation of the copyrights, trademarks, and other proprietary rights. Any alteration of the material or use of the material contained in the site for any other purpose is a violation of the copyright of nasscom and / or its affiliates or associates or of its third-party information providers. This material cannot be copied, reproduced, republished, uploaded, posted, transmitted or distributed in any way for non-personal use without obtaining the prior permission from nasscom.
The nasscom Members login is for the reference of only registered nasscom Member Companies.
nasscom reserves the right to modify the terms of use of any service without any liability. nasscom reserves the right to take all measures necessary to prevent access to any service or termination of service if the terms of use are not complied with or are contravened or there is any violation of copyright, trademark or other proprietary right.
From time to time nasscom may supplement these terms of use with additional terms pertaining to specific content (additional terms). Such additional terms are hereby incorporated by reference into these Terms of Use.
Disclaimer
The Company information provided on the nasscom web site is as per data collected by companies. nasscom is not liable on the authenticity of such data.
nasscom has exercised due diligence in checking the correctness and authenticity of the information contained in the site, but nasscom or any of its affiliates or associates or employees shall not be in any way responsible for any loss or damage that may arise to any person from any inadvertent error in the information contained in this site. The information from or through this site is provided "as is" and all warranties express or implied of any kind, regarding any matter pertaining to any service or channel, including without limitation the implied warranties of merchantability, fitness for a particular purpose, and non-infringement are disclaimed. nasscom and its affiliates and associates shall not be liable, at any time, for any failure of performance, error, omission, interruption, deletion, defect, delay in operation or transmission, computer virus, communications line failure, theft or destruction or unauthorised access to, alteration of, or use of information contained on the site. No representations, warranties or guarantees whatsoever are made as to the accuracy, adequacy, reliability, completeness, suitability or applicability of the information to a particular situation.
nasscom or its affiliates or associates or its employees do not provide any judgments or warranty in respect of the authenticity or correctness of the content of other services or sites to which links are provided. A link to another service or site is not an endorsement of any products or services on such site or the site.
The content provided is for information purposes alone and does not substitute for specific advice whether investment, legal, taxation or otherwise. nasscom disclaims all liability for damages caused by use of content on the site.
All responsibility and liability for any damages caused by downloading of any data is disclaimed.
nasscom reserves the right to modify, suspend / cancel, or discontinue any or all sections, or service at any time without notice.
For any grievances under the Information Technology Act 2000, please get in touch with Grievance Officer, Mr. Anirban Mandal at data-query@nasscom.in.
In our hyper connected and digital world, the financial services sector has become a magnet for cybercriminals, lured by the allure of exploiting vulnerabilities and seizing valuable assets. The rising tide of cyber risks and vulnerabilities in this industry has ignited deep concerns among professionals, regulators, and customers alike. And the fallout from these cyber attacks is nothing short of alarming, with potential financial losses, tarnished reputations, and the erosion of customer trust hanging in the balance. Join us on this captivating blog journey as we delve into the realm of cyber crimes in the BFSI sector. We will uncover their root causes, explore their most prominent catalysts, and equip you with five invaluable tips to construct a rock-solid security framework.
Unmasking the Shadows: Exploring the Cyber Threats Lurking
In the vast realm of the financial services sector, where fortunes are made and transactions occur at lightning speed, a dark underbelly thrives. It’s a world where cybercriminals lurk, seeking to exploit the immense wealth and sensitive data that flow through the veins of banks, insurance companies, investment firms, and payment processors. The numbers tell a chilling tale. In 2022 alone, this sector suffered over 3,500 data breaches, leading to the loss of a staggering 10 billion records. The consequences are not merely virtual; they have a real-world impact. The average cost of a data breach in the financial sector weighs in at a hefty $4.24 million.
These threats come in all shapes and sizes. Sophisticated malware attacks and data breaches aim to infiltrate the fortress of financial institutions, while social engineering tactics manipulate unsuspecting individuals into revealing valuable information. Let’s not forget about insider threats, where those on the inside pose a risk, intentionally or unknowingly. As technology advances, so too do the risks. The very innovations that enable groundbreaking financial services also introduce new avenues for exploitation, increasing the vulnerability of the sector. It’s a constant battle, a digital dance of wit and cunning.
But the impact of these cyber attacks extends far beyond the walls of individual institutions. A successful breach can send shockwaves through the financial systems, disrupting the delicate balance, and shaking market stability. Public confidence, once shaken, becomes a fragile thread, threatening the very integrity of the entire financial system. Compromised customer data exposes them to the looming specter of identity theft and financial fraud. It’s a breach of privacy and a betrayal of trust.
In fact, the Adobe 2022 Trust Report echoes these concerns. A staggering 84% of consumers emphasize the need for data safety, transparency, and control over how their data is used. For enterprises, it’s clear: to gain and maintain customer trust, these aspects are paramount.
Given these risks and the weight of these concerns, the financial services sector stands at a crossroads. It must prioritize cybersecurity like never before, fortifying its defenses, and safeguarding its valuable assets and sensitive information. The trust of customers hangs in the balance, and the sector must rise to the challenge, embracing the call for security, transparency, and control. In this interconnected world, where money and data intertwine, cybersecurity is not just a necessity—it’s a lifeline.
Distribution of cyber attacks on financial and insurance organizations worldwide from October 2021 to September 2022, by type
Malware attacks: Malware, with its many sinister forms—viruses, worms, Trojans, ransomware, and spyware—seeks to infiltrate systems, causing mayhem and compromising precious data. How does it do it? Well, imagine unsuspecting users innocently opening an email attachment, visiting a seemingly harmless website, or downloading software from a compromised source. Little do they know, they’ve just invited this digital devil into their world.
Once inside, cybercriminals unleash the full power of their malicious software. They gain unauthorized access, disrupt operations, and plunder sensitive data. It’s like watching a virtual heist unfold. They infiltrate an institution’s network, quietly slipping past defenses, and then the real mischief begins. They pilfer valuable customer information, leaving a trail of stolen PII (personally identifiable information) and financial records in their wake. But that’s not all. They go even further, encrypting files and holding them hostage for a hefty ransom, leaving organizations in a state of panic and desperation. And just when you thought it couldn’t get worse, they turn unsuspecting devices into obedient minions, forming massive botnets to carry out large-scale attacks.
The aftermath of such breaches is nothing short of catastrophic. Financial losses pile up, reputations crumble, and legal consequences loom large. It’s a nightmare scenario that no organization or individual wants to experience.
Network and application attacks: Network attacks are like cunning burglars that specialize in infiltrating computer networks, seeking out vulnerabilities to exploit for their nefarious purposes. Their aim? To gain unauthorized access, wreak havoc, and get their hands on sensitive information. These attacks come in all shapes and sizes, each with its own tricks up its sleeve. Picture a Distributed Denial of Service (DDoS) attack, where the network is bombarded with traffic until it collapses under the weight, leaving legitimate users stranded and frustrated. Sneaky packet sniffing attacks involve eavesdropping on network traffic, allowing attackers to intercept and analyze sensitive data passing through. And let’s not forget the notorious man-in-the-middle attacks, where attackers lurk in the shadows, secretly intercepting and tampering with communications between unsuspecting parties.
But wait, there’s more! Enter the realm of application attacks, where hackers set their sights on the vulnerabilities lurking within software applications. They exploit weaknesses, just like master lockpickers, aiming to gain unauthorized access, manipulate data, or launch even more sinister attacks. Imagine the treacherous cross-site scripting (XSS) attack, where attackers inject malicious code into web applications, lying in wait to steal sensitive data from unsuspecting users. And then there’s the devious SQL injection attack, where attackers manipulate databases by injecting malicious SQL code, bending the system to their wicked will.
It’s a constant battle against these cunning cybercriminals, but armed with knowledge and fortified defenses, we can outsmart and thwart their attempts to breach our networks and compromise our applications.
System anomalies: System anomalies, oh, what a complex puzzle they present in the world of cybersecurity! These sneaky attacks occur when computer systems decide to go haywire, exhibiting behavior that catches us all off guard. It’s like finding hidden vulnerabilities that no one knew existed. These anomalies can arise from all sorts of mischief, like mischievous software bugs, misconfigurations, or even sassy clashes between different components of a system. And here’s the kicker: attackers are like mischievous maestros, expertly exploiting these anomalies to slip through the cracks, access restricted areas, meddle with precious data, and disrupt services.
The consequences? We’re talking about unauthorized access to top-secret information, the kind that gives us goosebumps. And don’t even get me started on the financial losses! System downtime, recovery and remediation costs, legal troubles, regulatory penalties—it’s a devastating blow to an organization’s hard-earned reputation.
Account anomalies: Imagine a scenario where unauthorized individuals break into user accounts, causing chaos and wreaking havoc. These are what we call account anomalies, and they pose a serious threat to both individuals and organizations. There are various reasons behind these attacks, and one of the main culprits is weak or compromised passwords. It’s astonishing how many people use easily guessable passwords or recycle them across multiple accounts, practically rolling out the red carpet for attackers. To make matters worse, phishing attacks and credential leaks can result in compromised login information, which cybercriminals are more than happy to exploit for their nefarious purposes. Another major factor contributing to account anomalies is inadequate access controls and privileges. When access control policies are poorly defined or not enforced properly, unauthorized users can slip through the cracks and gain elevated privileges or access sensitive information. This opens the floodgates to unauthorized modifications, data breaches, and even those spine-chilling privilege escalation attacks. Let’s not forget about the danger lurking in outdated software and systems. When updates and security patches fall by the wayside, cyber attackers seize the opportunity to exploit vulnerabilities and gain unauthorized access to user accounts. It’s like leaving the front door wide open for them to stroll right in. Insider threats also play a significant role in account anomalies. Picture this: employees with access to systems, intentionally or unintentionally misusing their privileges, abusing their positions, or becoming unwitting pawns in the hands of attackers. The consequences can be disastrous, ranging from unauthorized data access and data exfiltration to full-blown sabotage.
Last but not least, enter the art of deception: social engineering tactics. These tricks of the trade, like phishing, spear-phishing, or social media manipulation, are the playgrounds of cybercriminals. They manipulate our psychology, tricking us into revealing sensitive information or granting access to our accounts without batting an eye.
Policy Violations: Cybercrime stemming from policy violations highlights the crucial significance of adhering to organizational policies in upholding a robust digital ecosystem. When employees consciously or unconsciously disregard established policies and guidelines, they create lucrative opportunities for cybercriminals to exploit vulnerabilities and launch their malicious attacks. These policy violations manifest in various ways, including the unauthorized sharing of sensitive information, negligence in implementing essential security measures, or the usage of unapproved software and devices. Through their actions, individuals unknowingly weaken the overall security posture of the organization, jeopardizing valuable assets and sensitive data.
Several notable companies have experienced significant data breaches in the finance industry, serving as cautionary tales for the importance of robust cybersecurity measures. Here are the top 5:
Equifax Data Breach (2017):
In one of the largest data breaches in history, Equifax, a leading credit reporting agency, fell victim to a cyber attack that compromised the personal information of approximately 147 million individuals. The attackers exploited a vulnerability in Equifax’s website software, gaining access to names, Social Security numbers, birth dates, and other sensitive data. The breach resulted in significant financial losses for Equifax, legal consequences, and severe reputational damage.
Bangladesh Bank Heist (2016):
Cybercriminals attempted to steal nearly $1 billion from the Bangladesh Central Bank by exploiting vulnerabilities in the bank’s security systems. They gained access to the bank’s network and used fraudulent SWIFT messages to transfer funds to accounts in the Philippines. Although most of the fraudulent transfers were blocked, approximately $81 million was successfully stolen. The incident highlighted the vulnerability of financial institutions to sophisticated cyber attacks and the need for robust security controls and protocols.
JPMorgan Chase Data Breach (2014):
JPMorgan Chase, one of the largest financial institutions globally, experienced a significant data breach that impacted approximately 76 million households and seven million small businesses. The attackers gained access to customer contact information, including names, addresses, email addresses, and phone numbers. While no financial information or Social Security numbers were compromised, the breach raised concerns about the security of customer data held by financial institutions and led to increased scrutiny of cybersecurity practices within the industry.
NotPetya Ransomware Attack (2017):
NotPetya, a destructive ransomware attack, targeted financial institutions, among other industries, causing widespread disruption and financial losses. The malware infected networks through software update mechanisms and spread rapidly, encrypting critical data and rendering systems inoperable. NotPetya affected numerous financial institutions globally, resulting in halted operations, significant financial losses, and reputational damage. The incident highlighted the need for robust backup and recovery mechanisms, as well as the importance of timely patching and system updates.
Carbanak Cybercrime Group (2013-present):
The Carbanak cybercrime group, active since 2013, targeted financial institutions worldwide, conducting sophisticated attacks with a focus on financial gain. The group employed various techniques, including spear-phishing, remote access trojans, and advanced malware, to gain access to financial networks and compromise systems. Carbanak stole hundreds of millions of dollars from banks, employing tactics such as ATM cash-out schemes, unauthorized transfers, and fraudulent SWIFT transactions. These attacks highlighted the evolving sophistication and persistence of cybercriminal groups targeting financial institutions.
These real-world case studies serve as stark reminders of the devastating consequences of cyber attacks on financial institutions. The incidents outlined above illustrate the tremendous financial losses, legal ramifications, damaged reputation, and shattered customer trust that can result from such breaches. They underscore the urgent need for comprehensive cybersecurity measures, including proactive threat detection, robust incident response plans, and a commitment to continuously improving defenses in the face of evolving cyber threats. Financial institutions must maintain a constant state of vigilance, investing in cutting-edge security technologies, and making cybersecurity a top priority to safeguard their operations and protect their customers from the potential fallout of cyber attacks.
Unstructured data: The root cause of security breaches
We reside in a world where every passing second adds to the avalanche of data, a treasure trove of potential insights. However, lurking beneath the surface lies a hidden menace: unstructured data. According to the experts at Gartner, a staggering 80 to 90 percent of the data generated today falls into this unstructured category, with a mere 12 percent receiving the analysis it deserves. But what exactly is unstructured data? It’s the elusive kind that eludes easy searchability and organization, encompassing handwritten notes, voice recordings, images, and other forms of media that resist easy classification. The result? Data sprawl—a state where crucial information exists, but without visibility or comprehension, rendering it useless.
Now, let’s focus on the financial sector, where unstructured data becomes an even more formidable adversary.
Banks and financial institutions churn out mountains of data daily, encompassing financial statements, loan agreements, audit reports, and sensitive treasures like images of checks or customer identification documents. While unstructured data presents a potential goldmine for invaluable insights and innovative breakthroughs, it also exposes enterprises to significant security challenges. The existence of unstructured data within the finance industry becomes a breeding ground for security breaches, amplifying the risks for multiple reasons. Here are the top 5:
1. In the vast labyrinth of unstructured data, organizations find themselves grappling with a multitude of challenges that put their sensitive information at risk. One of the foremost obstacles is the lack of visibility and control. Without a centralized approach to data management, tracking, monitoring, and securing sensitive information becomes an uphill battle. The absence of a clear line of sight opens the door for unauthorized access, data breaches, and a host of other malicious activities that thrive in the shadows.
2. Another hurdle lies in the realm of data classification. With the sheer volume and diversity of unstructured data, many enterprises find themselves struggling to classify it effectively. This classification process is crucial for prioritizing security efforts, yet without accurate categorization, sensitive data remains exposed, vulnerable to potential threats that may exploit this blind spot.
3. Insufficient access controls further compound the risks associated with unstructured data. Within its untamed realms lie troves of sensitive information that should be strictly limited to authorized personnel. However, without the enforcement of proper access controls, the risks of data leakage, insider threats, and unauthorized modifications soar, potentially leading to catastrophic consequences.
4. Enterprises often rely on data loss prevention (DLP) strategies to safeguard their information. However, when it comes to unstructured data, these ineffective DLP can prove to be a menace. Without robust content-aware monitoring and advanced analytics capabilities, DLP solutions struggle to effectively identify and protect sensitive information hidden within the vast expanse of unstructured data. This vulnerability leaves it exposed to unauthorized access or exfiltration, leaving organizations scrambling to contain the damage.
5. To compound matters, here comes compliance and regulatory gaps. Unstructured data frequently contains personally identifiable information (PII) and other sensitive data subject to strict regulatory requirements. Compliance with frameworks such as GDPR, PCI DSS, and industry-specific regulations becomes paramount. Failing to meet these obligations creates compliance and regulatory gaps, leaving organizations vulnerable to penalties, reputational damage, and legal consequences.
In this ever-evolving landscape, taming the untamed becomes paramount. Finding a balance between leveraging the potential of unstructured data while mitigating the security risks is the ultimate challenge that many enterprises face. Only by mastering this delicate dance can we ensure that our most valuable asset—data—remains a source of strength rather than a vulnerability waiting to be exploited.
That the contents of third-party articles/blogs published here on the website, and the interpretation of all information in the article/blogs such as data, maps, numbers, opinions etc. displayed in the article/blogs and views or the opinions expressed within the content are solely of the author's; and do not reflect the opinions and beliefs of NASSCOM or its affiliates in any manner. NASSCOM does not take any liability w.r.t. content in any manner and will not be liable in any manner whatsoever for any kind of liability arising out of any act, error or omission. The contents of third-party article/blogs published, are provided solely as convenience; and the presence of these articles/blogs should not, under any circumstances, be considered as an endorsement of the contents by NASSCOM in any manner; and if you chose to access these articles/blogs , you do so at your own risk.
Cloud has now become mainline technology and every IT executive has no choice but to understand, embrace and apply it to solve the business problems of today and tomorrow. As per a recent study by IBM Institute of Business Value, though 90 percent …
The cloud is where everyone, including businesses, wants to be right now. This is not limited to whether you are a business providing products or services.
The reason businesses move to the cloud is because the cloud offers many benefits. The chief…
Managing customer data is a very complex yet important task for businesses of all sizes. With each step in the organizational development, the quantity of data generation and the need of its protection rises. This accumulated data is company’s most…
Technological advancements have become the new norm for organizations. These technologically advanced applications provide an easier solution for various hurdles faced by the organization. It has been witnessed that an organization equipped with a…
In my last blog “Acquisitions – The growth story for Indian IT services Industry in 2020” I discussed how acquisitions were the key growth strategy in 2020 for the Indian IT Services segment. Taking that discussion forward let’s talk about another…
Public cloud, although extremely beneficial, has been frequently targeted for its supposedly poor security posture. Despite the low cost, no-maintenance, and near-unlimited scalability benefits, when it comes to security, apprehensions continue to…
