[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] Is Your Online Bank Vulnerable To Currency Rounding Attacks?
- To: <bugtraq@xxxxxxxxxxxxxxxxx>, <full-disclosure@xxxxxxxxxxxxxxxxx>, <cert@xxxxxxxx>, <si-cert@xxxxxxxx>
- Subject: [Full-disclosure] Is Your Online Bank Vulnerable To Currency Rounding Attacks?
- From: "ACROS Security Lists" <lists@xxxxxxxx>
- Date: Mon, 9 Jan 2012 17:25:08 +0100
Many online banks we've reviewed have been found to be vulnerable to the
"currency
rounding attack". What's special about this attack? Not much, except that it
seems to
be perfectly legal and allows one to make tens of thousands of EUR/USD per day.
Read
about it in our blog and help your banks avoid it:
http://blog.acrossecurity.com/2012/01/is-your-online-bank-vulnerable-to.html
or
http://bit.ly/yp4idv
Enjoy the reading!
Mitja Kolsek, CEO
ACROS, d.o.o.
Makedonska ulica 113, SI - 2000 Maribor, Slovenia
Tel +386.2.3000.280 Fax +386.2.3000.282
Web http://www.acrossecurity.com
Blg http://blog.acrossecurity.com Twt @acrossecurity
ACROS Security: Finding Your Digital Vulnerabilities Before Others Do
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/