Share this @internewscast.com

The U.S. financial services division of Chinese bank ICBC was hit with a cyberattack that reportedly disrupted the trading of Treasurys.

Industrial and Commercial Bank of China, the world’s largest lender by assets, said Thursday that its financial services arm, called ICBC Financial Services, experienced a ransomware attack “that resulted in disruption to certain” systems.

Immediately after discovering the hack, ICBC “isolated impacted systems to contain the incident,” the state-owned bank said.

Ransomware is a type of cyberattack. It involves hackers taking control of systems or information and only letting them go once the victim has paid a ransom. It’s a type of attack that has seen an explosion in popularity among bad actors in recent years.

ICBC did not reveal who was behind the attack but said it has been “conducting a thorough investigation and is progressing its recovery efforts with the support of its professional team of information security experts.”

The Chinese bank also said it is working with law enforcement.

ICBC said it “successfully cleared” U.S. Treasury trades executed Wednesday and repo financing trades done on Thursday. A repo is a repurchase agreement, a type of short-term borrowing for dealers in government bonds.

However, multiple news outlets reported there was disruption to U.S. Treasury trades. The Financial Times, citing traders and banks, said Friday that the ransomware attack prevented the ICBC division from settling Treasury trades on behalf of other market participants.

The U.S. Treasury Department told CNBC: “We are aware of the cybersecurity issue and are in regular contact with key financial sector participants, in addition to federal regulators. We continue to monitor the situation.”

ICBC said the email and business systems of its U.S. financial services arm operate independently of ICBC’s China operations. The systems of its head office, the ICBC New York branch, and other domestic and overseas affiliated institutions were not affected by the cyberattack, ICBC said.

Wang Wenbin, spokesperson for China’s Ministry of Foreign Affairs, said Friday that ICBC is striving to minimize the impact and losses after the attack, according to a Reuters report.

Speaking at a regular news conference, Wang said ICBC has paid close attention to the matter and has handled the emergency response and supervision well, the Reuters report said.

Nobody has claimed responsibility for the attack yet and ICBC has not said who might be behind it.

In the cybersecurity world, finding out who is behind a cyberattack is often very difficult due to the techniques hackers use to mask their locations and identities.

But there are clues about what kind of software was used to carry out the attack.

Marcus Murray, founder of Swedish cybersecurity firm Truesec, said the ransomware used is called LockBit 3.0. Murray said this information has come from sources with relations to Truesec, but was unable to reveal who those sources are due to confidentiality reasons. The Financial Times reported, citing two sources, that LockBit 3.0 was the software behind the attack too. CNBC was unable to independently verify the information.

This kind of ransomware can make its way into an organization in many ways. For example, by someone clicking on a malicious link in an email. Once in, its aim is to extract sensitive information about a company.

The VMware cybersecurity team said in a blog last year that LockBit 3.0 is a “challenge for security researchers because each instance of the malware requires a unique password to run without which analysis is extremely difficult or impossible.” The researchers added that the ransomware is “heavily protected” against analysis.

The U.S. government’s Cybersecurity and Infrastructure Security Agency calls LockBit 3.0 “more modular and evasive,” making it harder to detect.

LockBit is the most popular strain of ransomware, accounting for around 28% of all known ransomware attacks from July 2022 to June 2023, according to data from cybersecurity firm Flashpoint.

LockBit is the group behind the software. Its business model is known as “ransomware-as-a-service.” It effectively sells its malicious software to other hackers, known as affiliates, who then go on to carry out the cyberattacks.

The leader of the group goes by the online name of “LockBitSup” on dark web hacking forums.

“The group primarily posts in Russian and English, but according to its website, the group claims to be located in the Netherlands and to not be politically motivated,” Flashpoint said in a blogpost.

The group’s malware is known to target small and medium-sized businesses.

LockBit has previously claimed responsibility for ransomware attacks on Boeing and the U.K’s. Royal Mail.

In June, the U.S. Department of Justice charged a Russian national for his involvement in “deploying numerous LockBit ransomware and other cyberattacks” against computers in the U.S., Asia, Europe and Africa.

“LockBit actors have executed over 1,400 attacks against victims in the United States and around the world, issuing over $100 million in ransom demands and receiving at least as much as tens of millions of dollars in actual ransom payments made in the form of bitcoin,” the DOJ said in a press release in June.

Share this @internewscast.com
You May Also Like
Man in a black jacket holding a red chainsaw.

Elon Musk Unveils New Political Party to Restore American ‘Freedom’ Following Fallout with Trump and Departure from White House

ELON Musk has launched a new political following his explosive row with…

Multiple Cities Experience Shootings and Fireworks Accident on July Fourth Holiday

INDIANAPOLIS, Ind. (AP) — This year’s Fourth of July holiday saw numerous…
A man in a military uniform stands with a flag.

I’m the Leader of a Tiny Desert Empire in America: We’ve Declared War on Germany and Host Celebrity Guests

IN the sun-scorched high desert of Northern Nevada lies a tiny self-declared…
Julian McMahon dies after cancer battle

Julian McMahon Passes Away Following Cancer Struggle

McMahon gained fame for his role as the plastic surgeon Dr. Christian…
Security camera footage of a lion escaping and injuring people.

Scary Incident: Pet Lion Jumps Out of Garden to Attack Woman—and Owner’s Reaction is Equally as Startling

THIS is the terrifying moment a pet lion pounces on a woman…
Indianapolis mass shooting leaves 2 dead, several others wounded

Two Killed and Several Injured in Indianapolis Mass Shooting

Two people were killed in a shooting that injured at least seven…
Serial killer fears grip Texas community after dozens of bodies pulled from lake: 'Cannot be ignored'

Fears of a Serial Killer Spread in Texas Town as Multiple Bodies Discovered in Lake: ‘We Must Pay Attention’

The mysterious circumstances surrounding a Texas lake have caused unease in the…
Antisemitic attackers violently target synagogue, Israeli restaurant in Australia

Attackers with antisemitic intent violently target synagogue and Israeli restaurant in Australia

<!–> Rise in Antisemitic Incidents in Australia A synagogue in Melbourne was…
Pope Leo XIV Illinois childhood home purchased by village of Dolton

The Village of Dolton Buys Pope Leo XIV’s Childhood Home in Illinois

The 1,050-square-foot home in Dolton, south Chicago, was bought by the Pope’s…
What Movie Should I Watch Tonight? ‘Dances with Wolves’ Extended Cut on HBO Max

Looking for a Movie to Watch Tonight? Check Out the Extended Version of ‘Dances with Wolves’ on HBO Max

This Fourth of July, take a moment to remember the Kevin Costner…
South Philly shooting today: At least 8 wounded in mass shooting inside 7 Elements Restaurant Bar and Lounge in Philadelphia, PA

8 Injured in Mass Shooting at South Philly’s 7 Elements Restaurant Bar and Lounge Today

PHILADELPHIA — Eight people were wounded in a mass shooting early Saturday…
Chicago NASCAR race today: NASCAR Xfinity Series race The Loop 110 to take off in Grant Park Saturday; Cup Series happening Sunday

Chicago NASCAR Race Update: Xfinity Series ‘The Loop 110’ Hits Grant Park Saturday; Cup Series Scheduled for Sunday

CHICAGO (WLS) — Chicago’s third NASCAR Street Race will get underway on…