Browse Definitions :
Definition

cyberheist

A cyberheist is a large scale monetary theft conducted through computer hacking, the online equivalent of the real-world bank heist.

 Cybercriminals often target one organization and steal a large amount in a short period of time -- much like the classic bank heist in which a criminal or criminals demand on-hand cash or break into a safe. In a cyberheist, large known accounts or institutions are often the focus; at other times the target may be many customer accounts that collectively contain a large sum of money.

Online banking accounts are often the targets of cyberheists. The accounts may be found through hacking or phishing campaigns and cashed out in a single operation. The theft may involve a specific bank’s customers or a single large account.

Credit cards, debit cards and bank accounts are also targets in cyberheists. Cybercriminals might steal track 2 data credit card or debit card data and use card embossers and magnetic strip encoders to create card clones. Point-of-sale malware is often used to acquire massive numbers of cards. In either case, the cybercriminals might use cloned credit cards for cashing out at ATMs or sell them on underground online sites.

In December 2012, for example, cybercriminals stole $45 million from two Middle Eastern institutions, the Bank of Muscat and RAKBANK. Withdrawals where made from 27 different countries through over 36,000 transactions. Forty million was stolen within 10 hours from Bank of Muscat, the larger of the two.  In May 2013 seven members of the New York cell of the group were arrested, with an eighth having been murdered in the Dominican Republic.

Crimeware kits used for cyberheists include Zeus, SpyEye and the Butterfly Bot.

This was last updated in January 2015

Continue Reading About cyberheist

SearchCompliance
  • OPSEC (operations security)

    OPSEC (operations security) is a security and risk management process and strategy that classifies information, then determines ...

  • smart contract

    A smart contract is a decentralized application that executes business logic in response to events.

  • compliance risk

    Compliance risk is an organization's potential exposure to legal penalties, financial forfeiture and material loss, resulting ...

SearchSecurity
  • private key

    A private key, also known as a secret key, is a variable in cryptography that is used with an algorithm to encrypt and decrypt ...

  • DOS (disk operating system)

    A DOS, or disk operating system, is an operating system that runs from a disk drive. The term can also refer to a particular ...

  • security token

    A security token is a physical or digital device that provides two-factor authentication for a user to prove their identity in a ...

SearchHealthIT
SearchDisasterRecovery
  • What is risk mitigation?

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • change control

    Change control is a systematic approach to managing all changes made to a product or system.

  • disaster recovery (DR)

    Disaster recovery (DR) is an organization's ability to respond to and recover from an event that affects business operations.

SearchStorage
  • What is RAID 6?

    RAID 6, also known as double-parity RAID, uses two parity stripes on each disk. It allows for two disk failures within the RAID ...

  • PCIe SSD (PCIe solid-state drive)

    A PCIe SSD (PCIe solid-state drive) is a high-speed expansion card that attaches a computer to its peripherals.

  • VRAM (video RAM)

    VRAM (video RAM) refers to any type of random access memory (RAM) specifically used to store image data for a computer display.

Close