Bankers are under attack around the world. The assault is not being led by masked men with pistols but rather by anonymous cyber-thieves armed with malicious code.
The bankers’ vulnerability stems from a historic shift. Before 1973, the world’s banks had a communication problem. Transferring money involved countless phone calls, telex machine messages and frustration. Bankers needed to take control of the process.
Thus was born the member-owned message system Society for Worldwide Interbank Financial Telecommunication.
For more than four decades, the SWIFT system has standardized the global bank messaging system, allowing institutions to transfer funds and letters of credit as well as to make security transactions quickly and securely. In 2015, operating out of data centers in Belgium and the United States, SWIFT counted more than 11,000 member institutions in 200 countries and routed 24 million messages daily using unique 8- or 11-character codes.
Bankers had their computers used against them by hackers. |
Although SWIFT held no member funds, bankers came to rely on the automated message system. It was beyond reproach until details leaked about a cyber-heist at the Bangladesh central bank where thieves had penetrated the SWIFT system and looted member banks.
The Bangladesh heist was a wake-up call to the industry. Another confirmed attack on a Vietnamese bank is a clear indication an orchestrated campaign targeting SWIFT-member banks is underway. In both cases, thieves stole the SWIFT credentials of member banks.
When crooks saw money transferred to other banks held in the member account name, they submitted fraudulent messages asking that money be transferred back to one of their own accounts. To cover their tracks, the thieves used malware code. In the Bangladesh robbery, the bandits submitted messages asking for more than $1 billion before eventually making off with $81 million.
These cases are not isolated. Russian cyber-security firm Kaspersky Lab claims Interpol and other agencies estimate that more than $1 billion has been pilfered from 100 financial institutions during the last two years by the Carbanak cyber-gang spread across Russia, Ukraine and China.
The SWIFT weaknesses are fodder for calls to overhaul the banking system with something far more robust, like Blockchain. Ironically, getting there will involve surrendering the control member firms sought when they created SWIFT in Brussels decades ago.
Blockchain is the ledger system underlying the crypto-currency Bitcoin. Its key advantages are that it is shared publicly, decentralized, secure, trusted and automated. Blockchains allow everyone to write to a ledger system and those entries are available for all to see. When a transaction is completed, encrypted software creates a block that is added to the ledger system in linear, chronological order. The ledger constantly evolves and because there is no central authority, entries can never be deleted.
Forty-two of the largest banks, including Goldman Sachs (GS), JP Morgan (JPM), Citigroup (C), Wells Fargo (WFC) and Bank of America (BAC), have already begun testing Blockchain. The motivation is largely economic. The banks believe Blockchain will lead to annual back office cost savings of $20 billion. Stumping cyber-criminals would be an extra benefit.
When the financial services industry flocked to the SWIFT message system in the 1970s, few of them could have imagined hackers who would develop malicious software to rob untold millions. Fewer still would have believed member firms would respond by experimenting with non-proprietary software. It’s a brave new world for criminals and for the people trying to stay one step ahead.
You would think there would be a lot of cyber-security software companies that we could invest in to make some coin of our own off this phenomenon. But the industry is overvalued, and its services are being commoditized, a bad combination. Among the top names to watch, though, are Fortinet (FTNT), Palo Alto Networks (PANW) and Cyber-Ark Software (CYBR).
Best wishes,
Jon Markman
P.S. To help you get ready to take full advantage of the bull market of a lifetime, Larry Edelson wants to send you a complete Dow 31,000 Preparedness Kit — five distinct free reports! The first free report spells out step-by-step what you must do now to position yourself for amazing profits (and protection) over the next two years. Click here to download now!
{ 5 comments }
This shows that the trite but proven adage applies here too, and “the best way to rob a bank, is to own one”.
Many of these so-called security firms work both sides of the fence.
Hello Jon,
I simply wanted to thank you for such interesting and insightful articles. I love reading your special pieces!
I was in your trading service for a time, but unfortunately had to drop out. I hope I’ll be able to re-join sometime in the future, though. Until then, THANK YOU for sharing your expertise with Weiss Group readers! :-)
Sincerely,
Lynn Hayes
Because of the vulnerability of electronics and cyber threats that’s why many of us like cash, gold, and silver in our possession. The bank box has been proven a little more secure. The other problem you didn’t mention was the crime will get much worse because there is so little punishment for the crime being pursued or investigated. Without any consequences this new system of robbery will grow more and more.
Can you get this book reminiscences of a stock operator in good bookstores. I thought Hodges and Figgis beside Trinity College Dublin one of the oldest universities in the world in Republic of Ireland should have it? But theirs loads of books they don’t have like the book of poor auld fellas by Declan lynch.