Cyber attack on banking houses in the last holiday week. DDoS. Is there anything to worry about?

Kybernetický útok na bankovní domy

At the end of August, the news was filled with headlines about the fact that virtually all large banking houses in the Czech Republic had become the target of cyber attacks. That sounds ominous in itself, but what really happened? Was there any damage? And most importantly – what about (our) saved money? Are they safe?

First, let's clarify what it was actually about. There are a number of cyber attacks and their use differs mainly according to the goalthat the attackers want to achieve. Typical are various types of phishing attacksthe aim of which is to obtain the victim's access data, ransomwarewhose aim is to encrypt the data of the target system and demand a ransom or DDoS attacks

During a DDoS attack, the target (a server connected to a public Internet network) is overwhelmed with so many requests that it can no longer handle them. The service will thus cease to be available for the user. It is typical for DDoS attacks that requests to the target server are sent from a large number of different devices. As for the type of device, their operating system, the intended use of the device or its physical location. This complicates the work of the defenders, because they cannot simply ban requests from one device or from a specific territory, but have to deal with each device separately.

The motivation for carrying out these types of attacks is usually only to make life miserable for the victims - apart from momentary media popularity, the attackers do not gain much. Groups that are supported by the states in which they operate are usually behind this type of attacks. This particular attack is attributed to the Russian group NoName057, who claimed to be a hack on his Telegram account.

When we return to the initial questions - the damage has certainly been done. Banks could not provide standard services through their websites. Whether it is enabling clients to find out when the nearest branch is open, through general information about the services provided to internet banking.

However, savers' funds or any other data were not threatenedClients of banking houses can thus breathe a sigh of relief. No permanent damage was done to them from these attacks. This is finally confirmed by the words of the director of The National Cyber and Information Security Agency (NCISA) or the spokesperson of the Czech Banking Association.

More articles

Certification can also help companies strengthen their security. How can certification according to the EU Cybersecurity Act contribute to compliance?
We are looking for a new addition to the team to work closely with the senior management team, ensuring the running of the office and assisting with the HR agenda and finance.
The holiday season brings great discounts but also an increased risk of scams. How can you protect yourself? Here are 8 tips for safe online shopping.

Newsletter

Do you want to be sure that your company is protected from cyber threats and at the same time comply with the applicable legislation? Sign up for the newsletter and get practical advice from our legal consultants.

By clicking submit, you consent to the processing of your personal data for marketing purposes.