Cyber-Hackers Break Into IMF Computer System


Recommended Posts

Another major international financial institution has had its computer system attacked by unknown cyber-hackers, FOX News has learned.

The discovery of the assault last week threw into crisis the Washington, D.C. based International Monetary Fund (IMF), which offers emergency financial aid to countries faced with balance-of-payments problems, and provoked a shutdown of IMF computers that lasted for several days.

In October, FOX News reported that the computer system at the World Bank had also been hacked over a period of months.

FOX News has been unable to determine what, if any, information may have been obtained by the hackers. The IMF denies any critical intrusion took place.

The spyware discoveries came at a particularly sensitive time for the international bailout institution, which along with the World Bank is expected to play a central role in trying to combat global financial turmoil. The pair of institutions are described on the IMF's website as the "twin intergovernmental pillars supporting the structure of the world's economic and financial order."

Both will be intensively discussed at this weekend's meeting of G-20 nations in Washington, hosted by President Bush, in the effort to put global finance back on a stable basis.

Europe in particular is promoting an expanded role for the IMF, which traditionally has a European CEO, in that future architecture. IMF computers contain highly sensitive information not only on distressed nations, but also on currency payments and central bank balances around the world, all of which could be invaluable to outsiders.

What the IMF intrusion also shows is that the physical wiring of the world's financial systems is increasingly vulnerable ? and getting worse.

"Electronic safety in the financial sector is in dire jeopardy," says Tom Kellermann, a former senior computer security official at the World Bank's ultra-sensitive treasury unit ? which FOX News reported last month had been penetrated by illicit spyware. "What people don't realize is that the financial sector is the most heavily targeted sector of all critical infrastructures."

Kellermann today is the commissioner of the Commission on Cyber Security for the 44th Presidency, a unit of the Center for Strategic and Internal Studies ? a Washington-based security think tank ? that is preparing to issue recommendations in early December to President-elect Barack Obama on how to keep the country's computer systems from being penetrated.

IMF officials clamped down on their computer systems on November 7, after they discovered spyware that was quickly spreading through the institution's high-security computer system. Spyware is software that is secretly installed on a computer to intercept information or take control of the system.

The IMF's network link to the World Bank, the world's largest anti-poverty agency, was also temporarily severed, a move that IMF spokesman Bill Murray described as a "precaution."

But IMF officials strenuously deny that any lockdown of its computers took place, and insist that no important or sensitive financial information had been affected.

"There was no lockdown as far as I'm aware" says Murray. "I'm not aware of any major breaches, but enhanced security measures have been taken."

Prodded further as to the discovery of spyware, Murray responded: "As part of our ongoing [security] regime, we've had a scan of Fund personal computers and laptops and we found some workstations that did have malicious software, but absolutely no evidence that any sensitive information or systems were breached."

That is not, however, the version given by other IMF insiders and World Bank security officials, who requested anonymity.

According to them, the November 7 lockdown came only days after the World Bank moved more than 100 of its employees into an empty floor of one of the IMF's two buildings on Washington's Nineteenth Street, N.W., just across from the World Bank headquarters.

As FOX News reported on October 10, the World Bank itself suffered a series of cyber-attacks starting in the summer of 2007, both at headquarters and at other offices around the world. The World Bank strenuously denies that the intrusions took place, and none of the bank's 24 board members contacted by FOX News would discuss the matter. But sources told FOX News that at least one of those breaches also involved spyware, penetrating the World Bank's ultra-sensitive Treasury unit, which manages a $75 billion portfolio for itself and for several nations

The World Bank, however, did not take the dramatic step of shutting down all its computer systems to eliminate any spyware. Security experts say it is possible that the bank may have inadvertently infected the IMF ? simply by sharing some wires in the IMF's sublet building. Moreover, as FOX News reported last month, hundreds of workers previously employed by an Indian contractor that is barred from Bank contracting work on security grounds still work at the institution, either as regular staffers or as employees of other contractors.

Click here to read the story.

Shortly before the spyware was discovered, the World Bank's Independent Evaluation Group ? a unit responsible for critiquing the quality of bank projects?was moved into the IMF's headquarters building, where it is now taking up an entire floor.

"Before the move, there was a single point of access ? a server that acted as a firewall between the IMF and the bank," explains a technology expert at the bank. "The IMF was allowed into the World Bank's network, but not vice-versa. After the move, World Bank data, or packets, intermixed with the IMF data because they were all on the same wires."

Belatedly, it seems, the World Bank is attempting at least a partial cleaning of its systems. A bank insider tells FOX News that, in the wake of the FOX articles about its security penetrations, "all of the computer systems are being 'changed out' and overhauled in the Dept of Institutional Integrity [the bank's internal investigative arm]."

In fact, the computer assaults on the World Bank and the IMF are only part of a rash of sensitive cyber-burglaries that even reached into the U.S. presidential campaign. Both London's Financial Times and Newsweek recently reported that the computer network of the White House, and the Obama and McCain campaigns, were seriously breached.

The Pentagon claims the Chinese army has established units to develop viruses to attack enemy computer systems. Chinese hackers penetrated the Pentagon last year, in an attack that obtained e-mails from the system serving Defense Secretary Robert Gates.

Despite vigorous Chinese denials, "everyone in the intelligence community knows that China is the biggest player in cyber espionage," says John Tkacik, a former head of China intelligence for the U.S. State Department. Tkacik told FOX News that later this month, President-elect Obama will be presented with a new top-secret National Intelligence Estimate (NIE) report that "will cause the scales to drop from his eyes" regarding Chinese cyber-espionage.

"What the Chinese are particularly interested in at the IMF is what loans the IMF is likely to give to other countries," says Nick Day, a former British intelligence officer who runs Diligence, a private investigative firm that does extensive work for many international corporations and institutions.

"The geopolitics of this is that essentially you've got a few countries in the world that are stacked on huge foreign capital reserves ? Russia, China, Japan, the Middle East ? and the rest of us are pretty much borrowers to those lenders.

"And what the Chinese are looking to do is to get influence over a number of third world countries where there are assets in particular, where there's minerals, oil, etc. ? where there's wealth that would be strategically useful. And if the IMF is not going to bail them out, or is going to bail them out at a rate which is fairly punitive, then the Chinese can go into those countries and say, "Don't go to the IMF. Come to us. We'll bail you out and we want exclusive deals over the next 20 years to all your mining concessions in your country, access to mineral wealth, access to oil'? all the raw materials that China is going to need to keep carrying its economy forward."

At the World Bank, water-cooler speculation about Chinese intelligence-gathering has taken another turn. FOX News has learned that the bank's internal watchdogs have recommended sanctions against five major Chinese government-owned companies for corruption on roads-building projects in the Philippines.

"People in the bank are wondering about the coincidental nature of all this," a well-placed bank security expert told FOX News. "The cyber-attacks ramp up just as these guys are heading right into the Sanctions Board."

Asked to comment on the impending possibility of sanctions, a World Bank spokesman instead offered FOX News an exclusive on the "full and complete story" if FOX would delay publication of the news well beyond this weekend ? when world leaders would be discussing the institution. FOX News declined.

source

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Frankly, I blame whoever is writing such articles. "A big improvement/update and/or new feature is now available to everyone! Also, use some unofficial tweak tool to enable it because it actually isn't available to you yet and might not in fact even be entirely ready or whatever, hence why it is perhaps not enabled for you*. But it's great and you should enable it!" I mean there's nothing wrong with sharing info about some feature you might need to enable via unofficial means, of course. It's just that these articles tend to essentially end up being two news pieces in one, and one of them tends to be a bit misleading. (*Yes, yes, the "it's a controlled rollout!" thing. Not a fan of that one either. The argument, not the actual rollout.)
    • Thank you. Will do. I read in the release notes that editor config might be at play here.
    • Actually, I think even Microsoft doesn't know how to control it
    • OpenAI is making Codex more useful in Chrome and the cloud by Pradeep Viswanathan OpenAI's Codex now has more than 5 million users, up nearly 4x from earlier this year. To further accelerate Codex's growth among developers, OpenAI today announced that it has agreed to acquire Ona, a company that builds secure cloud execution and orchestration technology for developers. Ona will enable developers to run Codex with persistent and controlled cloud infrastructure for long-running agentic workflows. Right now, most Codex execution happens locally on developers' laptops and PCs, and the agents work continuously for hours. Through Ona, OpenAI aims to make Codex agents keep working for days without being tied to a user’s local machine or an active session. This will be an important capability for enterprises that want to deploy AI agents in production while maintaining control over infrastructure, data, security boundaries, credential scope, logging, and review workflows. Like any acquisition, the deal is still subject to customary closing conditions, including regulatory approvals. Until the deal closes, OpenAI and Ona will continue to operate as separate companies. After closing, Ona’s team will join the Codex team to improve developer workflows. Alongside the Ona acquisition announcement, OpenAI today introduced a few Codex updates. Developers can now save Codex rate limit resets and use them later instead of losing them when they are not needed immediately. OpenAI is also adding a referral option where users can invite a friend to Codex and get a saved rate limit reset. OpenAI today also announced a developer mode for browser use in Chrome and the Codex in-app browser. With this mode, Codex can use the Chrome DevTools Protocol to debug web apps, inspect pages, and work more directly with browser-based development workflows. Developers can use this when they want Codex to profile JavaScript, inspect console output and network traffic, examine web page states including the DOM and applied styles, and more.
    • Camtasia 2026.1.3 by Razvan Serea TechSmith Camtasia is the complete professional solution for high-quality screen recording, video editing and sharing. Camtasia 2026 makes editing your videos easier, and faster than ever. The new editor is packed with enhanced video processing, all-new production technology, an innovative library, and stock videos and other creative assets to help you create more polished, professional videos. No video experience needed. Anyone can create informative, engaging videos. Create professional, eye-catching videos: Add special video effects - Apply Behaviors that are perfectly designed to animate your text, images, or icons. Get a crisp, polished look without being a professional video editor. Drag-and-drop your edits - What you see is what you get. Every effect and element in your video can be dropped and edited directly in the preview window. And you can edit at resolutions up to beautiful 4K, for clear video at any size. Get exceptional performance - Camtasia takes full advantage of your computer’s processor with 64-bit performance. You’ll get fast rendering times and enhanced stability—even on your most complex projects. Camtasia 2026.1.3 changelog: Feature Updates Improved keyboard navigability in tool panels. Improved screen reader accessibility of headings in Preferences. Tool panels can now be resized using a keyboard-navigable control. Updated color of folder icon in User Library tab for better visibility. Grouped media now render a composite waveform considering all audio media within that group. Added Long Path Aware to the manifest of Editor and Recorder. Performance Improvements Improved performance for editing groups on the timeline. Improved the project loading performance when timeline has lots of trec media with cursor data. Updates for IT Administrators Updated cpp-httplib from 0.38.0 to 0.43.3. Updated expat from 2.7.4 to 2.8.0. Updated freetype from 2.13.3 to 2.14.3. Updated harfbuzz from 13.0.1 to 14.2.0. Updated libpng16 from 1.6.55 to 1.6.58. Updated pango from 1.57.0 to 1.57.1. Updated girepository from 2.86.3 to 2.88.0. Updated pcre2-posix from 10.47.0 to 12.0.2. Added new harfbuzz-gpu.dll. Updated FFmpeg from 7.1.1 to 7.1.2. Updated aom from 3.11.0 to 3.13.1. Updated dav1d from 1.5.0 to 1.5.1. Updated ogg from 1.3.5 to 1.3.6. Updated SDL2 from 2.32.4 to 2.32.10. Updated zlib from 1.3.1 to 1.3.2. Updated Nalpeiron binaries to version 4.4.69.3. Bug Fixes Fixed an issue which prevented some user submitted crash reports from being sent. Fixed a potential memory leak when decoding HEVC or VP9 video. Fixed a potential crash when trying to delete a range selection on a magnetic track. Fixed a bug with the Properties Panel showing stale properties when only a caption is selected on the timeline. Fixed an issue that could prevent the Opacity and Blur properties from being changed in the Background Removal effect. Fixed an issue where larger Camtasia online projects may fail to open in Camtasia Editor. Table of contents thumbnails are no longer created for Smart Player exports with no table of contents. Fix resetting skew revert to revert just skew and not scale as well. Fixed editing in Snagit with snagX file with Unicode characters. Fixed a bug where grouped visual media could be cropped in some cases. Fixed importing SnagX files with Unicode characters. Localization fixes. Download: Camtasia 2026.1.3 | 309.0 MB (Shareware) View: Camtasia Homepage | Tutorials | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • One Month Later
      Jamswaz earned a badge
      One Month Later
    • Week One Done
      Jamswaz earned a badge
      Week One Done
    • Rookie
      Marzoid went up a rank
      Rookie
    • Community Regular
      coch went up a rank
      Community Regular
    • One Year In
      slackerzz earned a badge
      One Year In
  • Popular Contributors

    1. 1
      +primortal
      512
    2. 2
      PsYcHoKiLLa
      188
    3. 3
      +Edouard
      157
    4. 4
      Steven P.
      83
    5. 5
      ATLien_0
      75
  • Tell a friend

    Love Neowin? Tell a friend!