Hackers arrested over €30M bank fraud exploiting service provider flaw

Law enforcement agencies have apprehended seven individuals in connection with a €30M bank fraud scheme that targeted Commerzbank customers by exploiting a flaw in a service provider's system. The arrests, made in Brazil and Europe, highlight the global nature of cybercrime and the importance of international cooperation in combating these threats. The vulnerability, which has not been publicly disclosed, allowed the attackers to withdraw funds from customer accounts, resulting in significant financial losses. The incident underscores the risks associated with third-party service providers and the need for robust security measures to protect sensitive financial information¹. This case serves as a reminder to practitioners of the importance of conducting thorough risk assessments and implementing effective security controls to prevent similar attacks.