First Open Source Software Supply Chain Attacks Targeting the Banking Sector

Open-source software supply chain attacks are posing significant threats to the banking sector. These attacks exploit vulnerabilities in the software supply chain, compromising the security of banks and their customers. Checkmarx, a leading cybersecurity company, has recently identified the first instances of such attacks, highlighting the need for heightened vigilance and robust security measures within the banking industry.

First Attack: Overview

In February 2023, the first attack targeting banks was initiated. Malicious actors uploaded a package to NPM, a popular repository for JavaScript packages. This attack served as a wake-up call to the banking sector, demonstrating the risks posed by vulnerabilities in the software supply chain.

First Attack: Payload Description

The package uploaded during the first attack contained a payload designed specifically to intercept login data. Once installed on a vulnerable system, the package would discreetly transmit the stolen login information to a remote location, enabling the attackers to gain unauthorized access to sensitive banking accounts.

Second Attack: Overview

Following the first attack, a similar attack pattern emerged in early April 2023. Once again, threat actors utilized the NPM platform to upload packages targeting the banking sector. This repetition reinforces the urgency for banks to fortify their software supply chain against such attacks.

Second Attack: Downloading Malicious Binary

To execute the second attack, the malicious actors employed encrypted files within the NPM packages. These files facilitated the download and installation of a malicious binary onto the victim’s system. Such malware presents a significant risk, as it may grant unauthorized access and control to the attackers.

Subdomain Creation for Evasion

To avoid detection and bypass traditional deny list methods, the attackers cleverly created a subdomain on Microsoft Azure CDN. By utilizing this subdomain, the attackers were able to disguise their activities, making it more challenging for security systems to identify and mitigate the threat promptly.

Utilization of the Havoc Framework

In their quest for comprehensive control, the attackers leveraged the Havoc Framework – an advanced post-exploitation command and control framework. This framework equipped the attackers with sophisticated tools and techniques, amplifying their ability to exploit vulnerabilities and inflict substantial damage within the compromised banking systems.

Checkmarx’s investigation into the attacks revealed a disturbing revelation—a link between the contributor behind the malicious packages and a fake LinkedIn profile. The fake profile masqueraded as an employee of the targeted bank, enabling the attacker to gain credibility and potentially deceive unsuspecting victims or bypass security measures.

The Ongoing Trend

Considering the severity and success of these attacks, Checkmarx predicts a persistent trend of attacks against the banking sector’s software supply chain. Threat actors are increasingly recognizing the potential rewards of exploiting vulnerabilities in this crucial sector. To safeguard against future attacks, banks must remain vigilant and prioritize robust security measures across their software supply chain.

The recent open source software supply chain attacks targeting the banking sector underline the need for heightened security practices within the industry. The identified attacks, which involved uploading malicious packages to NPM, demonstrated the ease with which threat actors can exploit vulnerabilities in the software supply chain. To protect themselves and their customers, banks must invest in comprehensive security measures, including rigorous code review processes, vulnerability assessments, and continuous monitoring. By remaining vigilant and proactive in defending against such attacks, the banking sector can ensure the integrity and security of their software supply chain.

Explore more

Employee Engagement Crisis: How to Restore Workplace Happiness

We’re thrilled to sit down with Ling-Yi Tsai, a renowned HRTech expert with decades of experience helping organizations navigate change through innovative technology. With a deep focus on HR analytics and the seamless integration of tech in recruitment, onboarding, and talent management, Ling-Yi offers invaluable insights into the pressing challenges of employee engagement and workplace well-being. In this conversation, we

How Is AI Transforming Digital Marketing Strategies?

Artificial Intelligence (AI) is rapidly becoming a cornerstone of digital marketing, fundamentally altering how brands connect with audiences in an increasingly crowded online space. As businesses grapple with the challenge of capturing consumer attention amidst endless streams of content, AI offers a lifeline by providing tools that personalize experiences, streamline operations, and deliver data-driven insights. This technological shift is not

Business Central Mobile Apps Transform Operations On-the-Go

In an era where business agility defines success, the ability to manage operations from any location has become a critical advantage for companies striving to stay ahead of the curve, and Microsoft Dynamics 365 Business Central mobile apps are at the forefront of this shift. These apps redefine how organizations handle essential tasks like finance, sales, and inventory management by

Transparency Key to Solving D365 Pricing Challenges

Understanding the Dynamics 365 Landscape Imagine a business world where operational efficiency hinges on a single, powerful tool, yet many enterprises struggle to harness its full potential due to unforeseen hurdles. Microsoft Dynamics 365 (D365), a leading enterprise resource planning (ERP) and customer relationship management (CRM) solution, stands as a cornerstone for medium to large organizations aiming to integrate and

Generative AI Transforms Finance with Automation and Strategy

This how-to guide aims to equip finance professionals, particularly chief financial officers (CFOs) and their teams, with actionable insights on leveraging generative AI to revolutionize their operations. By following the steps outlined, readers will learn how to automate routine tasks, enhance strategic decision-making, and position their organizations for competitive advantage in a rapidly evolving industry. The purpose of this guide