CERT-RO: RAIFFEISSEN BANK, ALPHA BANK AND PROCREDIT BANK TARGETED BY REAL-TIME PHISHING ATTACKS

The National Cyber Security Incident Response Centre (CERT-RO) has identified in recent weeks “real-time phishing” attacks against customers of financial institutions in Romania.

The banks targeted by these attacks are ProCredit Bank, Raiffeissen Bank and Alpha Bank.

“What is the difference between a classic phishing attack and real-time phishing? Unlike in the first case, where the attackers’ goal is to extract personal and financial data to be used later, in a real-time phishing attack, the fraudulent website is connected in real time with the targeted bank’s online banking platform. Once the user enters their login details for the internet banking service, the phishing page asks the user to wait for processing, with a message such as Wait for bank approval for your request. Please do not close the window. Of course, while the user waits for validation to enter the platform, the attackers access the online banking account in real time and initiate fraudulent bank transfers from the victim-user’s account,” CERT-RO specialists explain.

According to the source cited, the domain names used by attackers for phishing pages resemble the legitimate URLs of online banking platforms. “Moreover, typosquatting techniques are used to mislead users (e.g. goo.gle.com instead of google.com). That is why it is extremely important that when we go online, and especially when making transactions, we do not act impulsively, do not rush and check the information several times before executing an action. Identified phishing pages are hosted on legitimate platforms or CDNs, such as Github, Gitlab or Fastly, making it difficult to block access at the gateway and dismantle the phishing scheme,” the experts warn.

CERT-RO recommends vigilance when making online payments and using internet banking. “If you have fallen victim to this type of attack, notify your bank as a matter of urgency and provide full details of what information you provided and when it happened. At the same time, if you have suffered financial damage, the next step is to contact the police to open an investigation,” the institution informs, according to Agerpres.ro.

ALPHA BANK WANTS A NEW MEETING, EFG EUROBANK SAYS IT’S APPROVED

Alpha Bank has announced that it wants a new shareholders’ meeting on the merger with EFG Eurobank to be informed of the two groups’ costs of reducing Greece’s debt, but EFG says the merger has already been approved by shareholders and conditional only on the authorities’ approval.The two banks have returned with more detailed information, after initially giving the Athens stock exchange very brief releases, Mediafax reports.

Alpha Bank Group said in an initial statement to the stock exchange on Monday that it could not give a precise estimate for the timing and overall development of the merger of the two banks. Alpha Bank’s very brief announcement was followed by an equally brief response from EFG, which informed that it is consulting with Alpha Bank to complete the merger process as soon as possible. According to EFG Eurobank, there were no reasons to delay the completion of the merger.

Alpha Bank came back with a second statement explaining that the bank’s November general meeting of shareholders did not take into account the cost impact of the two banks’ participation in the programme to reduce the Greek state’s debts to private creditors. European leaders agreed in late October with representatives of the international banking sector that private investors holding Greek bonds would accept losses of 50%.

Details of the deal are still being discussed, and a final agreement could be announced this week.
The two banks’ managements confirmed at the time that they could not determine the impact of the Greek government’s debt relief commitment due to a lack of clarity on the terms of the implementation, the Alpha Bank release said.

“Alpha Bank intends to wait for the terms of the agreement to involve the private sector in the Greek debt reduction to be finalised and to convene a general meeting of shareholders to be informed and decide accordingly,” the second Alpha Bank statement said. The bank notes that the impact on both parties is expected to be disproportionate.

According to EFG Eurobank’s second press release, sent in response to Alpha Bank’s second announcement, the completion of the merger, which had already been approved by shareholders’ meetings in November, was conditional only on the approval of the relevant Greek authorities.

“All necessary approvals have been obtained and only the signing of the notarial deed, procedural formalities and formal approvals are still pending,” the EFG release said.

At the time of the general meetings, the parameters and basic framework for private sector participation in the Greek state debt relief, as decided at the EU summit on 26-27 October, were already known, according to the bank.
Even though the final impact was not known, the decisions of the shareholders’ general meetings did not set as a condition for the completion of the merger the conclusion of an agreement to reduce Greece’s debt or an impact assessment and nothing of this kind was communicated to the investor community. “All conditions and approvals of the merger have been met and no further decision by a corporate entity is required,” EFG notes.

Alpha Bank and EFG Eurobank, ranked second and third largest banks in Greece, agreed in August to merge and create the country’s largest bank to more easily deal with the debt crisis.

After Alpha Bank announced on Monday that it wanted to wait until the deal to reduce Greece’s debt was finalised, the Greek Finance Ministry said in a statement quoted by Athens News Agency and Reuters that there was no reason why the bond swap talks should affect the merger process between the two banks. “The management of the two banks has closely followed the negotiations between Greece and private creditors. Thus, they are aware of the PSI framework agreement (private sector participation in the Greek bailout programme – ed.), which is not new and has not been modified from the previously considered option,” the statement said.

EFG’s exposure to Greek government bonds is about twice that of Alpha Bank. EFG holds €6.9 billion in government bonds and Alpha Bank €3.8 billion, according to Reuters. “The market believes the terms of the deal could change in Alpha Bank’s favor. EFG Eurobank has a larger portfolio of Greek government bonds, so, according to losses from the net present value of government bonds, ed.), it will have a higher recapitalisation requirement,” a banking analyst said.