Over 100 banks hit by sophisticated cyberattack

AFP News – 6 hours ago

0users liked this commentThumbs UpThumbs Down0users disliked this comment

ricky l • a second agoRemove

To avoid the banks being hacked by hackers, the only way is set up intranet for banking.
Exposing to internet is a risk.

Reply

0users liked this commentThumbs UpThumbs Down0users disliked this comment

ricky l • a second agoRemove

Critical Information Infrastructure such as banking, energy etc. can be provisioned under intranet whereas less critical information access can be put in internet.

End devices can be access both intranet service and internet services separately so that internet hackers will not be able to hack intranet services anonymously as access to intranet services need to be authenticated via more secure authentication such as directory services and 2FA. This will severely limit hacker means to hack the intranet services.

 

Ricky Lim · Singapore

That is, instead of "Internet banking" - change it to "Intranet banking".

Reply · Like

0users liked this commentThumbs UpThumbs Down0users disliked this comment

GreenHornet  •  7 hours ago Report Abuse

do you mean dialing in to bank's server to do transactions?

v1/comments/context/efb25039-23d0-381a-873d-94f5305d7a6f/comment/1423978873230-ff043da2-02d4-468b-b154-10f9ca22fd11/reply/00004S000000000000000000000000-4d85daa3-0ca8-4888-a26e-6445c55a4b17

0users liked this commentThumbs UpThumbs Down0users disliked this comment

GreenHornet  •  7 hours ago Report Abuse

without going through internet.

0users liked this commentThumbs UpThumbs Down0users disliked this comment

ricky l • a second agoRemove

Different intranet network, different SSID for wireless LAN, different 4G network.
When accessing intranet, end device will not be able to access internet.
Intranet access need to authenticate with the Intranet Directory service with 2FA.

When accessing internet, it will not be able to access intranet simultaneously - in this way internet hacker will not be able to penetrate the intranet.

To further safeguard the intranet access :-
(1) BYOD, security posture assessment of end devices, port authentication
(2) Advanced Persistent threat etc - to remove botnet, phishing, malware etc.

can be used.

In this way, the chances of internet hacker will be devoid of persistent attack - stealthily or through phishing.