Comment

Comment on Deepfake scammer walks off with $25 million in first-of-its-kind AI heist

theskyisfalling@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago

What kind of company let’s a single employee transfer that amount of money without multiple different password entries or checks from different people though, seriously?

Doesn’t matter if they had a conference call with what appeared to be certain people as the article says they could easily have used key pair verification such as pgp. Sounds like poor security all around especially considering the amounts involved.

source

Sort:hotnew top

WhatAmLemmy@lemmy.world ⁨1⁩ ⁨year⁩ ago
PGP? Have you ever dealt with any banking or financial corporations? You’d have better luck getting the money handlers and decision makers to authenticate transactions with magic.

source
- gravitas_deficiency@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
  Japan:
  
  your second authentication factor will be stored on this 3.5” floppy drive
  
  source
- itsnotits@lemmy.world ⁨1⁩ ⁨year⁩ ago
  online lbanking UIs*
  
  the late '90s*
  
  early 2000s*
  
  source
  - Silentiea@lemm.ee ⁨1⁩ ⁨year⁩ ago
    It’s stylistically acceptable to put an apostrophe for plurals in cases where the plural thing isn’t a “normal” word, as is the case for initialisms like UI or numbers like the latter two you caught.
    
    Obviously a given body may make its own rules in this regard, but luckily English has no overall authority, and this is informal communication outside the domain of any minor ones (beyond, perhaps, idle pedants and prescriptivists).
    
    source
- EssentialCoffee@midwest.social ⁨1⁩ ⁨year⁩ ago
  Has South Korea moved on from Internet Explorer for their banking yet?
  
  source
meat_popsicle@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
lol Finance is sometimes hilariously low tech. Lookup how ACH works, it’s a fucking farce.

source
itsnotits@lemmy.world ⁨1⁩ ⁨year⁩ ago

lets* a single employee

source
- theskyisfalling@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago
  Good catch, autocorrect is a bastard :p
  
  source
- Silentiea@lemm.ee ⁨1⁩ ⁨year⁩ ago
  It’s yes tits, I think.
  
  source
Lmaydev@programming.dev ⁨1⁩ ⁨year⁩ ago
Somewhere I worked the CEOs email got hacked and they asked the head of finance to change the bank account details for a 100k payment that was due to go out.

Luckily they thought to double check with them. But it came really close to happening.

This all happened via a phishing email.

Social engineering is how most hacks happen. Doesn’t matter what protection you put in place.

source
Cornelius_Wangenheim@lemmy.world ⁨1⁩ ⁨year⁩ ago
Or just have everyone’s phone number on file and pick up the phone and call them first.

source