Central bank warns staff of impending cyber attack

Money Markets

CBK Governor Patrick Njoroge speaks during a media briefing in Nairobi on May 24, 2016. PHOTO | SALATON NJAU  

By OTIATO GUGUYU, dotiato@nationmedia.com

In Summary

• CBK has asked its employees to be extra-vigilant in order to prevent the cyber criminals who have infiltrated three central banks this year.
• The Kenyan central bank is not new to breaches of its internet security, having been taken over by Gaza Hacker Team in July 2013.
• Hackers targeted the Exchange Rates section of the CBK site and defaced it with messages in both English and French.

The Central Bank of Kenya (CBK) has warned its employees of an impending cyber-attack targeting key government installations, including the big bank that sits at the heart of Kenya’s financial services sector.

The CBK issued the warning through a notice to employees, asking them to be extra-vigilant in order to prevent the cyber criminals who have infiltrated three central banks this year.

“In light of this risk, we advise all staff to be cautious when opening emails and accessing the internet. Do not open emails from unknown sources,” the CBK notice says.

Two months ago, the cyber criminals attacked and stole Sh8.1 billion ($81 million) from Bangladesh’s central bank and BBC News reported that an unnamed commercial bank also came under attack causing loss of an undisclosed amount of money.

Swift, the technology company that oversees the financial messaging network that underpins global money transfers, said the second attack showed that the Bangladesh theft was not an isolated incident but ‘‘part of a wider and highly adaptive campaign targeting banks.’’

Hacktivists, as the internet criminals are popularly known, have also targeted the Central Bank of Cyprus, which briefly came under cyber-attack, days after a hacking outfit said it conducted a similar attack on the Greek central bank’s site.

The Kenyan central bank is not new to breaches of its internet security, having been taken over by Gaza Hacker Team in July 2013.

Hackers targeted the Exchange Rates section of the CBK site and defaced it with messages in both English and French that read: “…But all your interests and your citizens in all parts of the world will be our legitimate targets! So, if you want the safety of yourselves, possessions and interests from our revenge, depart all soldiers from our land ‘Mali’.’

Central Bank of Kenya governor Patrick Njoroge on Tuesday refused to comment on whether the Kenyan central bank had noticed an overt threat, but stated that all central bankers were on the lookout.

“All I can say is it has been very embarrassing for those jurisdictions where this has happened. My peers around the world meet each other, we discuss some of these things and all of us are cognizant of the impact of this,” he said at a Press briefing Tuesday.

READ: Cybercrime costs Kenya government Sh5bn a year: report

The most prominent attacks in Kenya have, however, been propagated by activists who have not gone after financial institutions and individuals with money.

The Kenyan government has especially been a target of sustained attacks by hacktivists, who use computers and computer networks to promote a political agenda by hijacking websites and leaking documents.

Hackers associated with the global movement ‘Anonymous’ have in the past stated that the ongoing cyber-attacks on the web and social sites operated by the government, the military and top leaders is part of an effort to expose corruption in Kenya.

Last month, the Foreign Affairs ministry came under attack from activists who said they had initiated ‘Operation Africa’ to stand against corruption, child abuse, and child labor.