Help

BI’s Article search uses Boolean search capabilities. If you are not familiar with these principles, here are some quick tips.

To search specifically for more than one word, put the search term in quotation marks. For example, “workers compensation”. This will limit your search to that combination of words.

To search for a combination of terms, use quotations and the & symbol. For example, “hurricane” & “loss”.

Login Register Subscribe

Bangladesh sues Philippine bank over cyber heist at New York Fed

Reprints
Bangladesh sues Philippine bank over cyber heist at New York Fed

(Reuters) — Bangladesh’s central bank on Thursday sued a Philippine bank to recoup losses it suffered when unidentified hackers stole $81 million from its account at the Federal Reserve Bank of New York nearly three years ago.

In a complaint filed with the U.S. District Court in Manhattan, Bangladesh Bank accused Rizal Commercial Banking Corp. and dozens of others, including several top executives, of involvement in a “massive” and “intricately planned” multi-year conspiracy to steal its money.

Bangladesh Bank said funds were stolen with the help of unnamed North Korean hackers who used malware with such names as “Nestegg” and “Macktruck” to obtain backdoor access its network.

It said funds were then funneled through RCBC accounts in New York City and to the Philippines, where much of it disappeared in that country’s casino industry.

RCBC did not immediately respond to a request for comment after market hours.

It had said on Wednesday, after learning the lawsuit would be filed: “We welcome this complaint, as it is an opportunity for RCBC to put on record again that it was a victim of what was started in Bangladesh by still unnamed persons.”

The case arose from a February 2016 incident when hackers tricked the New York Fed into sending out the $81 million.

Funds eventually landed in four accounts held in fake names at an RCBC branch in Makati City. Much of it was quickly withdrawn, and only about $15 million has been recovered.

RCBC, based in Manila, has contended that the theft was an inside job and accused Bangladesh Bank of a cover-up.

Fazle Kabir, governor of Bangladesh Bank, said on Wednesday the New York Fed had signed an agreement to help with the case.

A New York Fed spokeswoman declined to discuss what support her office might offer.

The hackers sought to steal close to $1 billion, but ultimately stole $101 million, including $20 million sent to a Sri Lankan account. That transfer was reversed after a spelling error was caught.

On Jan. 10, a Philippine court found Maia Deguito, who managed RCBC’s Makati City branch, guilty of eight counts of money laundering tied to the heist. It sentenced her to a 32- to 56-year prison term and a $109 million fine.

Ms. Deguito is a defendant in Thursday’s lawsuit. Her lawyer could not immediately be reached for comment.

In August 2016, the Philippine central bank fined RCBC a record 1 billion pesos ($19 million) for failing to stop stolen money from moving through the bank.

The case is Bangladesh Bank v. Rizal Commercial Banking Corp. et al., U.S. District Court, Southern District of New York, No. 19-00983.

Read Next

  • India bank hack similar to $81M Bangladesh heist

    (Reuters) — Hackers who tried to steal nearly $2 million from India's City Union Bank this month used tactics similar to those employed in the unsolved cyber heist of $81 million from Bangladesh's central bank in 2016, City's CEO said Monday.