The FASTCash malware tampers with messages between issuing and acquiring banking domains to turn rejected transactions into approved ones. The malware targets misconfigured implementations of the ISO 8583 financial messaging standard, which allow tampered messages to go undetected. The North Korean hacking group BeagleBoyz, a subset of government-backed group HiddenCobra, has employed the malware in numerous bank attacks worldwide since 2015.
The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.
