Once Again about Remote Banking Security

There is a specific section in the information security forum Positive Hack Days called Ways to Protect Money taking place in the Digital October Center these days, where leading experts from Russia and other countries speak about the issues of the banking security.

For the $natch competition, we have developed our own remote banking system containing common vulnerabilities detected by the experts of Positive Technologies in the course of such systems analysis.

Participants of the $natch contest were to demonstrate their knowledge and skills in exploiting typical vulnerabilities of the remote banking servers. There was a certain amount of money in our “protected” I-bank (conditions were near to the actual).

The hackers were to detect the remote banking vulnerabilities and use them to withdraw money within a limited time during the second stage of the competition. Participants were awarded with the withdrawn amounts. They could cash out their money from an ATM using the following PHDays cards:

And still there’s more to come! We are going to repeat this competition, but this time the teams of Positive Hack Days CTF will work on protection of the remote banking systems (4 hours to search and eliminate vulnerabilities), and then the Internet users will conduct attacks in the course of the Online HackQuest competition.

On May 31 at 6 p.m. the Internet users will penetrate to the CTF network via VPN and start attacking the remote banking systems.

Transferring money from the accounts of the CTF participants by exploiting remote banking vulnerabilities you can affect the final rating of the teams taking part in PHDays CTF 2012.

Please follow the links for the testing versions of the remote banking systems:

• only application source codes with the testing database
• virtual machine with an installed remote banking system

Use any of 4 accounts to withdraw money:

• 91307430600804200281 Anonymous
• 91307430600372200346 LulzSec
• 91307430600128500473 Offshore of Potato
• 91307430600296700514 International Fund for French Fries Welfare

Succeed in the competition as the $natch participants did! Enjoy the battle against the CTF teams and become even more skilled in detecting and exploiting typical vulnerabilities of the remote banking systems!

P. S. It’s worth reminding that the remote banking system has been developed by the experts of Positive Technologies for the purposes of PHDays 2012. It contains typical remote banking vulnerabilities and is not an actual bank system.