January 25, 2016 By Douglas Bonderud 2 min read

Austrian airplane component manufacturer FACC AG isn’t having a great month. According to CSO Online, the company’s newly released 2015 third-quarter results report spelled out a recent cyberattack on the accounting department of its FACC Operations unit. This is no small theft: Criminals flew the coop with more than $50 million in liquid funds.

While FACC AG said the loss does not pose an economic threat to ongoing company operation, it’s a wake-up call for other enterprises: Large-scale cybercrime is off the ground and gaining altitude. Is it possible to avoid financial free fall?

Cybercrime Goes Up, Up and Away

While FACC AG hasn’t been forthcoming with the details of the breach, it has assured investors that IT infrastructure, data security and intellectual property rights all remain secure. Speculation about the outflow of significant assets suggested the use of fraudulent wire transfers — once completed, it’s almost impossible to reclaim money even if criminal intent is proven. With criminals developing new email compromise and login theft techniques, these transactions often appear legitimate long enough to fool financial professionals.

As noted by Live Mint, fraud-based cybercrime is rising worldwide. A recent Ernst & Young report found that cybercrime is the fastest-growing fraud risk in India, while Data Quest predicted that mobile cyber fraud will become a serious problem for businesses across the country in 2016. In other words, although FACC AG’s loss is noteworthy owing to its size, this type of cyberattack is quickly becoming commonplace.

On Solid Ground

So how do companies mitigate the threat of cyber fraud losses, especially when attackers are so good at getting in, stealing cash and escaping notice? One option is beefing up internal security controls, hiring more IT security staff and piling on cybercrime budgets to help track down possible fraud indicators. Here, the biggest motivator is fear: Companies don’t want the public or competitors to know they’ve been hit, how much they’ve lost or if their systems contain potential vulnerabilities.

There might be a better way. In Canada, top industry leaders have created a new network — the Canadian Cyber Threat Exchange (CCTX) — set to launch in the next few months, according to the CBC. This independent, nonprofit organization will act as a “clearing house” for companies to report cyberattack vectors, malware types and even cybersecurity responses. Ideally, the exchange should help all CCTX members become better prepared and better equipped to handle emerging cybercrime threats.

Bottom line? No company wants to admit it has lost millions to fraud thanks to an IT breach. What if competitors take advantage or consumers abandon ship? But this kind of thinking is like grabbing your luggage when the plane is going down; no one walks away if the aircraft hits the ground. Data shared offers the chance for money saved. If companies want out of the cybercrime free fall, it’s time to be forthright.

More from

Researchers develop malicious AI ‘worm’ targeting generative AI systems

2 min read - Researchers have created a new, never-seen-before kind of malware they call the "Morris II" worm, which uses popular AI services to spread itself, infect new systems and steal data. The name references the original Morris computer worm that wreaked havoc on the internet in 1988.The worm demonstrates the potential dangers of AI security threats and creates a new urgency around securing AI models.New worm utilizes adversarial self-replicating promptThe researchers from Cornell Tech, the Israel Institute of Technology and Intuit, used what’s…

Passwords, passkeys and familiarity bias

5 min read - As passkey (passwordless authentication) adoption proceeds, misconceptions abound. There appears to be a widespread impression that passkeys may be more convenient and less secure than passwords. The reality is that they are both more secure and more convenient — possibly a first in cybersecurity.Most of us could be forgiven for not realizing passwordless authentication is more secure than passwords. Thinking back to the first couple of use cases I was exposed to — a phone operating system (OS) and a…

DOD establishes Office of the Assistant Secretary of Defense for Cyber Policy

2 min read - The federal government recently took a new step toward prioritizing cybersecurity and demonstrating its commitment to reducing risk. On March 20, 2024, the Pentagon formally established the new Office of the Assistant Secretary of Defense for Cyber Policy to supervise cyber policy for the Department of Defense. The next day, President Joe Biden announced Michael Sulmeyer as his nominee for the role.“In standing up this office, the Department is giving cyber the focus and attention that Congress intended,” said Acting…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today