Third-party software vulnerability results in Mexican bank heist scoring millions

Mexican authorities are investigating suspect a bank hack that siphoned hundreds of millions of pesos out of at least five banks.

A vulnerability in software developed by a third party and used to connect payment systems is suspected to have been compromised allowing the money to be illegally siphoned from “fake accounts”, Banxico, Mexico’s central bank, Head of Operations Lorenza Martinez told Reuters.

Threat actors sent hundreds of false orders to the money around in amounts ranging from tens of thousands to hundreds of thousands of pesos from various banks to accounts that were then emptied in cash withdrawals from dozens of branch offices.

One source told publication the thieves made off with more than 300 million persons or $15.4 million while others have reported as much as 400 million pesos may have been stolen.

Authorities are still investigating whether or not the attackers have help from inside the bank.

Read more>>>