stoner wrote:These criminals take advantage that their underlying program source code is encrypted and proprietary to program loopholes into their system that internal IT staff of banks have no access to and cannot detect.They select the least busiest time of the week ie Sunday midnight when few or no IT staff are in banks to carry out their heist.Their preferred method is to use the Mobile App platform that they set up for banks whereby using their malicious code they masquerade as genuine customers and perform mass Bank to M-Pesa transfers from several high net worth accounts into their M-Pesa accounts and pilfer millions of shillings in a single hacking attack.
Am no expert but would assume the back-end was never secure [the banks database] which was the work of the bank to make secure with passwords and codes that when a client connects it authenticates the client. Encryption is good so man in the middle cannot see what passwords and codes are being passed around and therefore ensuring the safety of the client. Anyway think the banks are to blame if this did happen whatever software/ app that was being used was too rudimentary.
Looking forward into the future maybe an independent testing company should check such apps and really see what they are up to before being set up for use. A rubber stamp of clean working code...
You have to learn the rules of the game. And then you have to play better than anyone else - Albert Einstein