NSA spying isn’t just a US matter anymore, as hackers releases documents noting that NSA spies on global transfers.
Reuters reported that hackers known as The Shadow Brokers “released documents and files [some with NSA seals], that cybersecurity experts said indicated the U.S. National Security Agency had accessed the SWIFT interbank messaging system, allowing it to monitor money flows among some Middle Eastern and Latin American banks.” The NSA hasn’t commented or released any statements.
“The release included computer code that could be adapted by criminals to break into SWIFT servers and monitor messaging activity,” Shane Shook, a cyber security consultant who has helped banks investigate breaches of their SWIFT systems, told Reuters. “The release of these capabilities could enable fraud like we saw at Bangladesh Bank.”
Also published were many programs for attacking various versions of the Windows OS. In a statement to Reuters, Microsoft said it had not been warned by any part of the U.S. government that such files existed or had been stolen. “Other than reporters, no individual or organization has contacted us in relation to the materials released by Shadow Brokers,” the company said.
Reuters was told by officials that the NSA knew for months about the Shadow Brokers breach. Under a White House process established by former President Barack Obama’s staff, companies were usually warned about dangerous flaws. However, this time there were no warnings.
The SWIFT messaging system is used by banks to transfer trillions of dollars each day. SWIFT said it had no evidence that the main SWIFT network had ever been accessed without authorisation.
The released files shows that rather than banks, it’s service bureaus that were hacked. SWIFT service bureaus are companies that provide an access point to the SWIFT system for the network’s smaller clients and may send or receive messages regarding money transfers on their behalf. Hacking a service bureau will allow access to all of their clients and banks.
The documents posted by the Shadow Brokers include Excel files listing computers on a service bureau network, user names, passwords and other data. Other analysts believes it could be a way for the US and allied intelligence agency to monitor and disrupt financial transactions to terrorist groups.
In 2013, documents released by former NSA contractor Edward Snowden said the NSA had been able to monitor SWIFT messages. The agency monitored the system to spot payments intended to finance crimes.
Reuters could not confirm whether the documents released Friday by the Shadow Brokers, if authentic, were related to NSA monitoring of SWIFT transfers since 2013. The documents released by the hackers did not clearly indicate whether the NSA had actually used all the techniques cited for monitoring SWIFT messages.
This report was sourced through Reuters and has not been independently verified. It has been edited to summarise.
