IMF hacked; no end in sight to security horror shows

From Citi to Sony, a series of security breaches suggest we're well into the Year of the Malicious Hacker.

The recent online intrusion into International Monetary Fund servers may have been the work of malicious hackers working for a foreign government, according to online reports.

The IMF is reportedly reluctant to disclose where it believes the attacks came from since 187 of the world's 194 nations (as recognized by the U.S. Department of State) are members of the fund. The hack's perpetrators obtained a "large quantity of data," including e-mail and other documents during the intrusion, according to Bloomberg.

The attacks reportedly began before May 14 when IMF Managing Director Dominique Strauss-Kahn was arrested in New York on sexual assault charges.

The IMF provides, among other functions, economic assistance and policy advice to nations in financial distress to help stabilize the global economy. That means the global agency has, as The New York Times recently reported, "highly confidential information about the fiscal condition of many nations." As such, the IMF's files contain "political dynamite" that could affect global markets, according to the Times. It's not clear if the data stolen from the IMF was particularly sensitive.

Spear Phishing

How hackers were able to penetrate the IMF's network is still unknown. But it appears the intrusion may have been the result of a spear phishing attack. This kind of attack typically works by tricking an employee into clicking on a link to a malicious website or downloading a file loaded with malware.

The IMF is not alone in falling victim to an online hack. In fact, the agency is just the latest in a string of high-profile attacks against corporations and organizations such as Google, Sony, Lockheed Martin, RSA Security, and CitiGroup. Here's a look at other high profile online break-ins and foiled attacks that are turning 2011 into the Year of the Malicious Hacker.

CitiHack

The personal details of about 210,000 CitiGroup cardholders were recently stolen after a security breach via Citi's web portal.

The malicious hackers were able to get away with cardholders' names, account numbers, and contact information such as e-mail addresses.

Google Spars With China

On June 1, Google said it had discovered a campaign originating from Jinan, China to steal Gmail user names and passwords of hundreds of users including "senior U.S. government officials, Chinese political activists, officials in several Asian countries (predominantly South Korea), military personnel and journalists."

Google isn't certain (or saying) how the attacks were carried out, but suspects that spear phishing played a role. The search giant says its internal systems were not affected by the attacks, and secured the accounts of all those affected by the attacks. China denies having any role in the Gmail hacks.

Lockheed Martin

Lockheed Martin, a major defense contractor for the U.S. government, in late May detected an intrusion into its servers.

The company said it was able to take "aggressive actions to protect all systems and data" and that no data from customers, programs or employees was compromised. The attackers reportedly used purloined security tokens obtained through a hack in March against one of Lockheed Martin's security providers, RSA Security.

RSA (In)SecurID

EMC notified its users in March that one of its companies, RSA Security, was the victim of an "extremely sophisticated cyber attack." Malicious hackers obtained data relating to RSA's SecurID two-factor authentication system, the company said.

But EMC was confident the stolen data would not "enable a successful direct attack on any of our RSA SecurID customers." The company reversed course in early June after it was revealed the SecurID hack was related to the Lockheed Martin break-in.

RSA's "extremely sophisticated cyber attack" later turned out to be the result of a "low-profile" user downloading a malicious Excel spreadsheet via email.

Epsilon's Lost Address Book

In April, Epsilon, the world's largest permission-based e-mail marketer, said its servers had been compromised exposing many people's real names and e-mail addresses.

The hack exposed the customer databases for many major companies such as JPMorgan Chase, Capital One, Marriott Rewards, US Bank, Citigroup, and Walgreens.

Sony's Never-Ending Story

Of course, the most famous attacks in recent months are those aimed at Sony and its subsidiaries. At last count, at least 13 Sony sites have been hit around the world including the PlayStation Network, Sony Online Entertainment, Sony Pictures, and country-specific Sony sites in Japan, Greece, Thailand, and Canada. The hacks resulted in a variety of customer data breaches including names, e-mail addresses, home addresses, phone numbers, and, in some cases, credit card numbers.

If you were the victim of a recent hack against a bank or other online service, check out PCWorld's "Are You a Data Breach Victim? Here's What to Do."

Connect with Ian Paul (@ianpaul) and Today@PCWorld on Twitter for the latest tech news and analysis.

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags hackersfirewallsnetwork securityThe New York TimessecurityU.S. Department of Statesony

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Ian Paul

PC World (US online)
Show Comments

Essentials

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?