The Freeland File
Aerospace & Defense
Global Market Data
Lucy P. Marcus
David Cay Johnston
The Great Debate
Jack & Suzy Welch
Macro & Markets
Lipper Awards 2012
Personal Finance Video
Exclusive: Western report - Iran ships arms, personnel to Syria via Iraq
19 Sep 2012
UPDATE 3-Romney says his campaign's for "100 percent" of America
19 Sep 2012
Police begin enforcing controversial Arizona immigration measure
19 Sep 2012
Weak data and crisis worries hit shares, euro
Study on Monsanto GM corn concerns draws skepticism
19 Sep 2012
New video shows Romney saying Palestinians don’t want peace
U.S. embassies attacked in Yemen, Egypt after Libya envoy killed
Romney derides Obama supporters in hidden camera speech
Our day's top images, in-depth photo essays and offbeat slices of life. See the best of Reuters photography. See more | Photo caption
Never too old
A look at seniors living life and proving that "you are as young as you feel." Slideshow
Lindsay Lohan's woes
Lindsay Lohan was arrested for leaving the scene of an accident in lower Manhattan. Slideshow
Bank group warns of heightened risk of cyber attacks
UPDATE 3-Bank group warns of heightened risk of cyber attacks
Wed, Sep 19 2012
Germany urges public to stop using Internet Explorer
Tue, Sep 18 2012
Obama vows to "bring to justice" ambassador's killers
Thu, Sep 13 2012
Banks in talks to ease transfer of money with phone, email
Wed, Sep 12 2012
Cyber Crime »
JPMorgan Chase & Co's international headquarters are seen on Park Avenue in New York July 13, 2012.
Credit: Reuters/Andrew Burton
By Jim Finkle and David Henry
Wed Sep 19, 2012 8:37pm EDT
(Reuters) - A financial services industry group warned U.S. banks, brokerages and insurers on Wednesday to be on heightened alert for cyber attacks after Bank of America and JPMorgan Chase experienced unexplained outages on their public websites.
The Financial Services Information Sharing and Analysis Center, which is widely known as FS-ISAC, raised the cyber threat level to "high" from "elevated" in an advisory to members, citing "recent credible intelligence regarding the potential" for cyber attacks as its reason for the move.
The problems with the websites at the two banks came after an unidentified person posted a statement on the Internet threatening to attack Bank of America and the New York Stock Exchange as a "first step" in a campaign against U.S. companies. The posting said the attacks would continue until the film that had stirred up anti-U.S. protests across the Middle East was "erased" from the Internet.
It was not possible to identify the person who posted the statement. Nor was it clear if the threat had anything to do with the issues at either of the two banks.
Dan Holden, director of security research at Arbor Networks, said that several U.S. banks were under assault by a distributed denial of service (DDoS) campaign. He declined to identify them by name.
An outside security contractor who was familiar with the attacks said that they were "massive" in scope.
Denial-of-service attacks seek to disrupt websites and other computer systems at the targeted organization by overwhelming their networks with computer traffic.
The move by FS-ISAC came just two days the FBI published a "fraud alert" advising financial services firms that cyber criminals may be disrupting service to their websites in a bid to keep banks from noticing a recent surge in fraudulent large-sized wire transfers. (1.usa.gov/SUGCDZ)
"Often these DDoS attacks are part of a more sophisticated blended threat - One that utilizes DDoS as a diversion for more complex, difficult to detect techniques with the intention to extract customer data or financial information," said Holden of Arbor Networks.
An FBI spokeswoman declined to say if the tactics cited in the fraud alert were related to the problems experienced by the two banks.
On Wednesday the consumer banking website of JPMorgan Chase & Co was intermittently unavailable to some customers. The problems followed issues with the website of Bank of America Corp on Tuesday amid threats on the Internet that a group was planning to launch cyber attacks on a U.S. bank.
JPMorgan Chase spokesman Patrick Linehan said: "We're experiencing intermittent issues with Chase.com. We apologize for any inconvenience and are working to restore full connectivity."
A Bank of America spokesman reported no continuing problems on Wednesday. "Our online banking services have been, and are, up and running," Mark Pipitone said. "The vast majority of our customers have not experienced any issues."
'ENSURE CONSTANT DILIGENCE'
The short advisory from the industry group urged banks and other industry members to "ensure constant diligence in monitoring and quick response to any malicious events."
The Reston, Virginia-based group is owned by dozens of firms, including the two banks, as well as Citigroup Inc, Goldman Sachs Group Inc and Morgan Stanley. Insurers including American International Group, Allstate Corp and State Farm Insurance also belong to the group, as do credit card companies MasterCard Inc and Visa Inc.
The advisory also cited a warning from Microsoft Corp that hackers have attacked some of its customers by means of a security bug in its widely used Internet Explorer browser.
Microsoft has yet to release software to fix that security flaw. The German government advised the public to stop using Internet Explorer until an update is released. The U.S. Department of Homeland Security has advised users to follow steps recommended by Microsoft to reduce the risk of attacks but noted that those measures may not fully secure the browser.
The warning from FS-ISAC comes as the Obama Administration is considering issuing an executive order that could instruct government agencies to take action to help better protect the nation's critical infrastructure from cyber attacks.
Legislation that would strengthen the government's ability to help secure private networks has so far been stalled in Congress by groups concerned about privacy issues as well as business groups that oppose increased regulation of their activities.
Senator Jay Rockefeller, who heads the Senate Commerce Committee, on Wednesday sent letters to the 500 biggest U.S. companies, challenging them to improve their computer security. He blamed the defeat of the legislation on concerns raised by "a handful of business lobbying groups and trade associations."
He asked the companies to identify their own best practices and to spell out their concerns about government-conducted risk assessments that were part of the cyber security bill. He warned that the companies could face "reactive and overly prescriptive legislation" if nothing were done until some cyber disaster.
During a speech to the annual Air Force Association conference, Deputy Defense Secretary Ashton Carter complained that businesses are not doing enough to protect their own networks, saying he was disappointed that the legislation has not passed Congress.
Officials with FS-ISAC could not be reached to comment on the decision to raise its cyber threat level. A spokesman for the Department of Homeland Security declined to comment on the advisory from the industry group.
(Reporting by David Henry in New York, Rick Rothacker in Charlotte, North Carolina, Jim Finkle in Boston. Additional reporting by Joseph Menn in San Franciso and Andrea Shalal-Esa in Washington; Editing by Gerald E. McCormick, Steve Orlofsky, Bob Burgdorfer and Prudence Crowther)
Related Quotes and News
We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/
Be the first to comment on reuters.com.
Add yours using the box above.
Back to top
New York Legal
Support & Contact
Connect with Reuters
Our Flagship financial information platform incorporating Reuters Insider
An ultra-low latency infrastructure for electronic trading and data distribution
A connected approach to governance, risk and compliance
Our next generation legal research platform
Our global tax workstation
About Thomson Reuters
Thomson Reuters is the world's largest international multimedia news agency, providing investing news, world news, business news, technology news, headline news, small business news, news alerts, personal finance, stock market, and mutual funds information available on Reuters.com, video, mobile, and interactive television platforms. Thomson Reuters journalists are subject to an Editorial Handbook which requires fair presentation and disclosure of relevant interests.
NYSE and AMEX quotes delayed by at least 20 minutes. Nasdaq delayed by at least 15 minutes. For a complete list of exchanges and delays, please click here.