[ISN] World Bank under cyberattack?

http://news.cnet.com/8301-1009_3-10063522-83.html

By Robert Vamosi 
Security 
CNET News
October 10, 2008

The computer network used by the World Bank Group has suffered a series 
of at least six intrusions since mid-2007, according to a report [1].

The World Bank Group was first notified of the intrusions by the FBI in 
September 2007, when the bureau was investigating another cybercrime 
case involving transactions out of Johannesburg, South Africa. Fox News 
said it has an internal memo (PDF) [2] describing the initial intrusion 
to World Bank Group employees.

The World Bank Group did not respond to a request for comment.

The World Bank Group, based in Washington, D.C., is not a traditional 
bank. It is made up of the International Bank for Reconstruction and 
Development and the International Development Association, and it 
provides a vital source of financial and technical assistance to 
developing countries around the world, according to its Web site. The 
World Bank board represents 185 member nations and currently budgets $25 
billion annually in antipoverty campaigns.

Up to 40 servers have been penetrated in a series of attacks, according 
to Fox News, including one attack on a server that held 
contract-procurement data. Two of the attacks appear to come from the 
same block of IP addresses originating in China. But Graham Cluley, 
senior technology consultant at Sophos, told CNET News that doesn't mean 
the attackers are in China--only that they are using compromised 
machines located in that country.

[1] http://www.foxnews.com/story/0,2933,435681,00.html
[2] http://www.foxnews.com/projects/pdf/WorldBankDoc1.pdf

[...]


__________________________________________________      
Register now for HITBSecConf2008 - Malaysia! With 
a new triple-track conference featuring 4 keynote 
speakers and over 35 international experts, this 
is the largest network security event in Asia and 
the Middle East! 
http://conference.hackinthebox.org/hitbsecconf2008kl/