Security · High impactFan score 4 · Tier D3 sources3 comments in the community
$133 million stolen from French bank via exploited service provider
Help Net Security · By Sinisa Markovic ·
The Brief · written from 3 sources
- Crédit Mutuel Arkéa, a French cooperative bank, was hit by a cyberattack that enabled fraudulent transactions of up to $133 million.
- The bank says attackers exploited a third-party service provider and used the bank's own account to make the transactions.
- The bank responded by suspending certain systems.
Why it matters
Attackers used a trusted vendor's access rather than breaking the bank's core systems directly, so third-party integrations with access to accounts or payments need the same security scrutiny as internal access.
Who’s affected
- Banks and financial institutions that rely on third-party service providers
- Teams whose vendors have access to payment or account systems
- #security
- #banking
- #supply-chain
- #fraud
- #third-party-risk
Attackers siphoned an estimated $133 million from Crédit Mutuel Arkéa by using the bank’s own account to wire money to other banks, from where it was possibly converted into cryptocurrency. The French cooperative banking group, which has €211.5 billion in total assets and more…
What developers are saying
Based on 3 comments · Mostly critical
Only one of the three Hacker News comments was provided. Its author suggests the attack could be a false flag, arguing that sending small amounts to Lazarus-linked addresses would let the attackers make the theft look like North Korea's work. They also say the FBI was similarly misled after the Binance hack.
- Attribution to North Korea doubted100%
- Planted dust transactions as deception100%
- Past FBI misattribution100%
In favour
Concerns
- − The North Korea attribution may be a deliberate false flag
“send $50k of dust to Lazarus addresses so everyone blames it on North Korea”
“even the FBI bought it with the Binance hack”