From: InfoSec News (alertsinfosecnews.org)
Date: Sat Oct 11 2008 - 02:04:39 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

http://news.cnet.com/8301-1009_3-10063522-83.html

By Robert Vamosi
Security
CNET News
October 10, 2008

The computer network used by the World Bank Group has suffered a series
of at least six intrusions since mid-2007, according to a report [1].

The World Bank Group was first notified of the intrusions by the FBI in
September 2007, when the bureau was investigating another cybercrime
case involving transactions out of Johannesburg, South Africa. Fox News
said it has an internal memo (PDF) [2] describing the initial intrusion
to World Bank Group employees.

The World Bank Group did not respond to a request for comment.

The World Bank Group, based in Washington, D.C., is not a traditional
bank. It is made up of the International Bank for Reconstruction and
Development and the International Development Association, and it
provides a vital source of financial and technical assistance to
developing countries around the world, according to its Web site. The
World Bank board represents 185 member nations and currently budgets $25
billion annually in antipoverty campaigns.

Up to 40 servers have been penetrated in a series of attacks, according
to Fox News, including one attack on a server that held
contract-procurement data. Two of the attacks appear to come from the
same block of IP addresses originating in China. But Graham Cluley,
senior technology consultant at Sophos, told CNET News that doesn't mean
the attackers are in China--only that they are using compromised
machines located in that country.

[1] http://www.foxnews.com/story/0,2933,435681,00.html
[2] http://www.foxnews.com/projects/pdf/WorldBankDoc1.pdf

[...]

__________________________________________________
Register now for HITBSecConf2008 - Malaysia! With
a new triple-track conference featuring 4 keynote
speakers and over 35 international experts, this
is the largest network security event in Asia and
the Middle East!
http://conference.hackinthebox.org/hitbsecconf2008kl/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]