"World\u2019s biggest bank forced to trade via USB stick after hack"

" World\u2019s biggest bank forced to trade via USB stick after hack \r\n\r\nOn Thursday, trades handled by the world\u2019s largest bank in the globe\u2019s biggest market traversed Manhattan on a USB stick.\r\n\r\nIndustrial & Commercial Bank of China Ltd.\u2019s US unit had been hit by a cyberattack, rendering it unable to clear swathes of US Treasury trades after entities responsible for settling the transactions swiftly disconnected from the stricken systems. That forced ICBC to send the required settlement details to those parties by a messenger carrying a thumb drive as the state-owned lender raced to limit the damage.\r\n\r\nThe workaround \u2014 described by market participants \u2014 followed the attack by suspected perpetrator Lockbit, a prolific criminal gang with ties to Russia that has also been linked to hits on Boeing Co., ION Trading UK and the UK\u2019s Royal Mail. The strike caused immediate disruption as market-makers, brokerages and banks were forced to reroute trades, with many uncertain when access would resume.\r\n\r\nThe incident spotlights a danger that bank leaders concede keeps them up at night \u2014 the prospect of a cyber attack that could someday cripple a key piece of the financial system\u2019s wiring, setting off a cascade of disruptions. Even brief episodes prompt bank leaders and their government overseers to call for more vigilance.\r\n\r\n\u201cThis is a true shock to large banks around the world,\u201d said Marcus Murray, the founder of Swedish cybersecurity firm Truesec. \u201cThe ICBC hack will make large banks around the globe race to improve their defenses, starting today.\u201d\r\n\r\nAs details of the attack emerged, employees at the bank\u2019s Beijing headquarters held urgent meetings with the lender\u2019s US division and notified regulators as they discussed next steps and assessed the impact, according to a person familiar with the matter. ICBC is considering seeking help from China\u2019s Ministry of State Security in light of the risks of potential attack on other units, the person said.\r\n\r\nLate Thursday, the bank confirmed it had experienced a ransomware attack a day earlier that disrupted some systems at its ICBC Financial Services unit. The company said it isolated the affected systems and that those at the bank\u2019s head office and other overseas units weren\u2019t impacted, nor was ICBC\u2019s New York branch.\r\n\r\nThe extent of the disruption wasn\u2019t immediately clear, though Treasury market participants reported liquidity was affected. The Securities Industry and Financial Markets Association, or Sifma, held calls with members about the matter Thursday.\r\n\r\nICBC FS offers fixed-income clearing, Treasuries repo lending and some equities securities lending. The unit had $23.5 billion of assets at the end of 2022, according to its most recent annual filing with US regulators.\r\n\r\nThe attack is only the latest to snarl parts of the global financial system. Eight months ago, ION Trading UK \u2014 a little-known company that serves derivatives traders worldwide \u2014 was hit by a ransomware attack that paralyzed markets and forced trading shops that clear hundreds of billions of dollars of transactions a day to process deals manually. That has put financial institutions on high alert.\r\n\r\nICBC, the world\u2019s largest lender by assets, has been improving its cybersecurity in recent months, highlighting increased challenges from potential attacks amid the expansion of online transactions, adoption of new technologies and open banking.\r\n\r\n\u201cThe bank actively responded to new challenges of financial cybersecurity, adhered to the bottom line for production safety and deepened the intelligent transformation of operation and maintenance,\u201d ICBC said in its interim report in September.\r\n\r\nRansomware attacks against Chinese firms appear rare in part because China has banned crypto-related transactions, according to Mattias W\u00e5hl\u00e9n, a threat intelligence specialist at Truesec. That makes it harder for victims to pay ransom, which is often demanded in cryptocurrency because that form of payment provides more anonymity.\r\n\r\nBut the latest attack likely exposes weaknesses in ICBC\u2019s defenses, W\u00e5hl\u00e9n said.\r\n\r\n\u201cIt appears ICBC has had a less effective security,\u201d he said, \u201cpossibly because Chinese banks have not been tested as much as their Western counterparts in the past.\u201d\r\n\r\n Record Levels \r\n\r\nRansomware hackers have become so prolific that attacks may hit record levels this year.\r\n\r\nBlockchain analytics firm Chainalysis had recorded roughly $500 million of ransomware payments through the end of September, an increase of almost 50% from the same period a year earlier. Ransomware attacks surged 95% in the first three quarters of this year, compared with the same period in 2022, according to Corvus Insurance.\r\n\r\nIn 2020, the website of the New Zealand Stock Exchange was hit by a cyberattack that throttled traffic so severely that it couldn\u2019t post critical market announcements, forcing the entire operation to shut down. It was later revealed that more than 100 banks, exchanges, insurers and other financial firms worldwide were targets of the same type of so-called DDoS attacks simultaneously.\r\n\r\nCaesars Entertainment Inc., MGM Resorts International and Clorox Co. are among companies that have been hit by ransomware hackers in recent months.\r\n\r\nICBC was struck as the Securities and Exchange Commission works to reduce risks in the financial system with a raft of proposals that include mandating central clearing of all US Treasuries. Central clearing platforms are intermediaries between buyers and sellers that assume responsibility for completing transactions and therefore prevent a default of one counterparty from causing widespread problems in the marketplace.\r\n\r\nThe incident underscores the benefits of central clearing in the $26 trillion market, said Stanford University finance professor Darrell Duffie.\r\n\r\n\u201cI view it as one example of why central clearing in the US Treasuries market is a very good idea,\u201d he said, \u201cbecause had a similar problem occurred in a not-clearing firm, it\u2019s not clear how the default risk that might result would propagate through the market.\u201d"

"World\u2019s biggest bank forced to trade via USB stick after hack"

MTN Nigeria Now the Most Capitalized Stock in NigeriaAMP

Nigerian Stock Market Creates Largest Pool of Billion-Dollar Stocks in 2025AMP

OPEC+ Nears Decision Point on Next Oil Output HikeAMP

Europe’s Energy Future Hinges on Global PowersAMP

US Companies Cut Investments in China to Record Lows, Here’s WhyAMP

How AI is Rewriting and Enhancing Water Risk ManagementAMP

SheFarms Broiler Edition Kicks Off in Greater AccraAMP

PharmAccess Ghana, Healthcare Federation of Ghana sign SafeCare License Agreement; to use Newest ISQua-Certified Version 5AMP

Tanzania Sink Burkina Faso to Delight Home Crowd In TotalEnergies CHAN 2024 OpenerAMP

MTN Nigeria Now the Most Capitalized Stock in NigeriaAMP

Nigerian Stock Market Creates Largest Pool of Billion-Dollar Stocks in 2025AMP

OPEC+ Nears Decision Point on Next Oil Output HikeAMP

Europe’s Energy Future Hinges on Global PowersAMP

US Companies Cut Investments in China to Record Lows, Here’s WhyAMP