How A Printer Lost A Country $81,000,000

#heist #hacker #cybercrime
On the morning of February 7th, 2016, director of Bangladesh Bank Zubair Bin Huda, takes the elevator and gets off on the 10th floor. He walks briskly into the most restricted part of the building, his mind fixated on the problem that has plagued his office for the past couple of days - the printer. This isn’t just any printer: It’s an automated machine hooked up to the bank's software, designed to print transaction reports instantly, automatically, and 24/7.
This printer was a big deal, and the empty tray represented a huge problem. After troubleshooting the issue for two days, the printer finally comes back online! But then, a backlog of more than expected reports started rolling out, and it was soon obvious that something wasn’t right. The New York Federal reserve received instructions to drain their entire account. Panic erupted as employees rushed to stop the transaction, but it was likely too late. - Bangladesh had just lost 1 billion dollars.

[@Cipher-HD]

Thank's everyone for the support on the video! If you liked it, please consider subscribing. We have so much cool content in the works :)

[@rizzing_mogger]

your the best

[@radar1437]

great work , can you your workflow and software used , is it solely your or team i wonder !

[@Ankpudding]

Good video! And great channel!

[@BillAnt]

At 14:40 there's a misspelling of the Lazarus / Lazarous Group... Ooops a mistake like the hackers did. lol

[@M_I_A_]

Could you maybe tell me what kind of music you used at the end of the vid🙏🙏🙏 PLEASE, I need it!!

[@hellboy19991]

A German bank denying a 20 million transaction for a typo is the most German thing ever

[@speakertomeat]

As a computer programmer, Swift is amazing, they use pretty weak identifiers (all textual, person/company name, bank name, bank address), and yet the whole system works perfectly as if based on hard unique identifiers.

[@manu144x]

@@speakertomeat Because in reality it's a human based system. They rely on humans to do all the checking.

[@tomlxyz]

@@manu144x are you implying that humans make less mistakes?

[@manu144x]

@@tomlxyz I'm implying that because it's about money, everything is double checked and triple checked and very very few people actually have access to the swift system.

[@photoo848]

@@manu144x imagine being at a party and somebody asks what you do for a living and you have to say: "Oh, you know, nothing glamourous, I check bank transfers for typos. All in a day's work for stopping bank heists"

[@L-Office]

if you bought a HP printer, you also know how it feels losing a billion dollars to a printer. The cartridge prices are ridiculous

[@Martial-Mat]

HP, Epson, Canon - all of their ink costs more than its weight in gold.

[@fishyswirlgaming5741]

lol

[@paulsz6194]

That’s how the Printer companies make their money- you don’t seriously think there is a serious profit margin on a $59 multifunction inkjet printer? The printer is the loss leader. It’s the ongoing revenue from ink sales that are the real revenue stream. It’s just like new cars and buying new car parts car headlights on new cars are insanely expensive, as no aftermarket manufacturer makes them for at least the first three years, so the car manufacturer has the monopoly on car parts for new cars…

[@BillAnt]

Screw ink-jets, I got a nice Canon laser printer instead. It print pages in less than 5 seconds with perfect laser sharp lines and gray-scale graphics. Oh, and the toner costs me about hundred bucks per year, sometimes less. :)

[@Martial-Mat]

@@BillAnt Depends what you need. I need the ability to print in full colour and on thick paper. Your solution would not be viable for my needs.

[@HummyGG]

as a printer technician I can hardly believe that they were physically printing every transaction log on one single printer....

[@Mr.QuantumC0re]

As a photocopier technician I can 100% agree!

[@samredmond9929]

@@Mr.QuantumC0re as a laser printer & fax technician I couldn't agree more

[@Mr.QuantumC0re]

@@samredmond9929 😄!

[@JJtoob]

@@samredmond9929 You speak fax AND printer, damn.

[@primeral]

fax! It's no wonder the printer was always broken

[@fyrestorme]

Summary: Q: How A Printer Lost A Country $1,000,000,000? A: Employees opened an email attachment.

[@Aarush.A.S]

😂

[@hotstepper6303]

Yeah! The printer was being blamed for no reason. Instead it was becoming a problem for the hackers.

[@sotostsorb]

@@hotstepper6303 well the printer was to get people to click on the video

[@Dbomb81]

Completely agree. Copier Technician here, clicked the link to see how they did this, annnnnnd they didn't.

[@talkingdot]

@@hotstepper6303 for real though, how dare they slander that printer we fellow humans will usually always be the weakest link in any cybersecurity aspect of a job

[@Tigrou7777]

0:17 If I was the director, my biggest concern wouldn't the printer, but the fact that the staff work completely naked.

[@klausstock8020]

Yes. But the director didn't complain...he had no balls...

[@AsilarWindsailor]

I think it matters who the staff is as to whether or not that's a problem X)

[@antoine2571]

LMAO funniest shit i've seen in a while

[@El_Negro2003]

@@klausstock8020THE DIRECTOR.. HAS NO BALLS, THE STAFF HAVE 2 BUT VERY SMALL🗣️🗣️🗣️🗣️🗣️

[@klausstock8020]

@@El_Negro2003 For comparison: how to protect your bank's money *with balls of steel:* kzbin.info/www/bejne/gXLZond8aLyooMUsi=1yU_4s5cg4eMFXXO

[@dom91373]

Who the heck opens a zip file thinking it's a job application

[@jfbeam]

Loads of stupid people. Sadly, too many of them work for banks. (it's why I won't even admit to having anything to do with computer/network security.)

[@MisteryBio]

I've seen people opening scripts thinking they are written reports just because "they are coming from a reputable source"

[@MK-of7qw]

almost anyone and everyone. you can give them extensive training on what not to do. users will STILL open it.

[@BillAnt]

When I saw that at 1:35 I was laughing my ass off. Woowza! Hate to say, but dummies actually deserve it. lol

[@AhmetMurati]

majority of the banks automatically reject emails with ZIP files attached

[@TheRedDraqon]

So, Thor from Pirate Software was right! "If the printer makes a weird noise, I shoot it."

[@Oskha_]

elaborate

[@MarioPL989]

@@Oskha_ There is nothing to elaborate about this.

[@tailsorange2872]

Hello, fellow goblin :LUL:

[@tailsorange2872]

@@Oskha_ He's referencing a Twitch Streamer PirateSoftware

[@bbqchezit]

The only right move

[@ProjectDT88]

Correct Title: How A Printer Played A Very Small Role In A Country Almost Losing $1,000,000,000

[@PatrickBaptist]

Without the printer they prob would have not gotten much of anything, the printer was a great decoy that people were focused on rather than being focused on their jobs, seriously it was a pivotal piece.

[@xijinpooh8210]

That isn't just a very small role buddy.

[@ProjectDT88]

The majority of the heist was based on them doing it when no one was in the office because of the weekend and holiday. Printer could of printed it right there and then but it makes no difference if no one is there to read the print outs.

[@PatrickBaptist]

@@xijinpooh8210 Ah you can't explain some things to some people, it's beyond them or they just didn't really fully hear out the matter.

[@hellNo3333]

it's a terrible video and clearly he has no idea what he's talking about, it's just cool visuals and "oh there's this impenetrable system and these hackers found their way in, and also theres a printer" like lol. just shows that ppl would watch anything if the story is linear enough and the visuals look nice

[@danielwolf69]

Reminds me of a Disrupt or Fern video. 7.2k views is criminally underrated for this quality of production and storytelling. Keep it up!

[@Martini_Mann]

I completely agree. The level of editing and quality is absolutely stunning especially for a small creator.

[@ishid_anfarded_king]

hopefully this channel doesn't end up like Disrupt...

[@danielwolf69]

@@ishid_anfarded_kingYep

[@jan8265]

Actually, the team behind Fern made a video about this, but only on their German channel. However, I feel like the quality of the cypher video is actually higher. Incredible job!

[@neoey]

simplicissimus already made a very similiar video... kzbin.info/www/bejne/lYfIpmCigZqtqNk to be fair his visuals are different

[@thebalancer]

that was a goat level editing and representation. hats off to the team

[@Cipher-HD]

Thank you, means a lot! The videos are only going to keep getting better and better.

[@iSaidNo666]

​You are feeling frisky@@Cipher-HD

[@opfijqwhnien]

Stolen

[@howtodefeatgangstalking]

It's all AI

[@aa664_]

All good except for Naked mannequins hanging out with SWEATER wearing mannequin 😂

[@abuDojanaTahmid]

As a Bangladeshi Cyber Security researcher I thoroughly enjoyed the video.

[@moamber1]

My hamster is as smart as Bangladeshi Cyber Security researcher. At least, according to this video.

[@MdWahidurRahmanOvi]

is Sat, Sun weekend in Bangladesh ?

[@abuDojanaTahmid]

@@moamber1 it is sad that you are not as smart as your hamster.

[@PatrickBaptist]

LOL *CYBER* that word quickly got wore out in murika in the 90s lol.

[@eperou8846]

​@@PatrickBaptistwhat are you saying

[@xcoder1122]

Who still allowed e-mails with attachments to directly pass through to employee mailboxes in 2015 simply doesn't deserve any better. In our company, not even HTML messages are allowed to pass through to employee accounts. Employees only get plain text e-mails, never anything else. If the mail contains no plain text message, the incoming mail server translates the HMTL text to plain text before forwarding it. If there are attachments, those are stored on an extra server and are then stripped from the mail. Even if hackers manages to hack the incoming mail server, it's outside of the internal network (before the main firewall) and has no access to anything internally. It can only forward messages to the internal mail server (that will drop all mails containing attachments or HMTL immediately without further notice) and it can upload attachments to the attachment server (there is no external interface for downloading attachments). So even if attackers get total control of the incoming mail server, they cannot access attachments from any other mails and if they disable stripping HMTL/attachments, then these mails never go anywhere as the next server in the process chain will just drop them without even trying to process them. There is no way you can hack into our network by using an exploit in HMTL mails or by adding malicious attachments, as none of this ever reaches any employee. Further sending the same (or a very similar) message to multiple employees one by one will immediately cause that message to be blocked as spam for all employees, because this is no normal use case. Either a message is for one specific employee only or it is for a group of them but then it is send to an internal group distribution address (e.g. every team has a team address for that purpose) or it is send to all the related employee at once (multiple TO or CC). Everything else is clearly spear fishing and performed by someone who doesn't even know the group addresses or who has no idea which employees belong to the same team.

[@StarWarsExpert_]

That was very good insight into how companies and their email systems should operate today. If I ever own a company, I know what to look out for.

[@klausstock8020]

@@StarWarsExpert_ It's different for some companies. An erroneously blocked or even just delayed email might cost a bank a huge amount of money. Of course there are compensating measures. Employees with access to potentially dangerous email attachments won't sit in the same network as...the printer which prints out every transaction? Any unexpected TCP/IP, UDP, GRE, ... packet must disconnect the suspected PC from the network, immediately followed by a snatch-&-grab of the hardware (for malware analysis) and the employee. Still, I remember one case, less than 10 years ago, where a CD was physically mailed to the bank. This one went straight to malware analysis. Of course, the Bangladesh bank's security system was just the boss checking printouts after the weekend.

[@Bums001]

This sounds great but are you also working in a bank? Never heard of a company that does this yet in my line of work. In my current job, most of the employees work remotely so the vulnerability increases but we just simply have no access to the payment information of the customers. My company also did not provide any work computer so we are just using our personal one.

[@xcoder1122]

@@Bums001 I work for an IT company. We mainly produce and sell software, we also sell some IT services, and we run our own cloud infrastructure. The only two valuable things you can steal from us are source code and customer account information (names, addresses, phone numbers, what company they work for, etc.). You can't steal customers' private data because data in our cloud, unless it is public, is always end-to-end encrypted (not even we have access to this data, only the customer does), you can't steal passwords (we don't store passwords, we store only salted hashes of passwords, so not even we know our customers' passwords), and you can't steal money (we have no records of bank accounts or credit card numbers because we don't process payments ourselves, we use an external payment processor for that). So we are not even a valuable target and yet we have all these security measures. It's a shame if a valuable target has fewer security measures than we do. However, hackers cannot know whether we are a valuable target or not, so they try anyway. Our mail concept filters several spear-fishing attempts a day, and our main firewall's intrusion alert goes off several times a week where people are actively trying to break into our cloud systems using known security exploits that our firewall blocks, and that wouldn't have worked anyway because our systems are all patched against them. Without all these security measures, we would probably get hacked several times a year.

[@blakebotha9697]

You also have to understand that some companies treat computer security like safety. They neglect it until something bad happens.

[@gcc2596]

I'm from the Philippines and I remember this story way back 2016. The Branch Manager of that RCBC Bank was charged and now facing 30 plus years in prison time, she appealed the case last 2019 and was denied by the Court of Appeals citing that all elements of money laundering was present and reiterate that she knew that the transaction is fraudulent. I guess she received a huge amount for this money laundering transaction.

[@millienexu5684]

Whoa!! So although this video presented so many genuins moves by the hackers, at the end of the day if there wasn't corruption on the ground level it would've been impossible? Or was she just an innocent person pushed out as scapegoat lol, which honestly feels possible too

[@ttn20101]

@@millienexu5684na it’s definitely corruption, otherwise it would be impossible for newly opened personal account to receive such a large sum without getting flagged and checks for suspicious activities.

[@udirt]

you don't have to figure out that an international bank uses SWIFT you can't assume SWIFT is a state of the art system, it's been running for many decades and could be the archetype of 'this old software banks run'

[@smallcube-zn2mm]

If banks run LinuxSE (secure enhanced Linux) instead of old WinXP or 95 then lots of money would have saved

[@Iden_in_the_Rain]

I was about to say, I don’t know much about SWIFT but I do know that COBOL is still used in a lot of banks and that language is over 60 years old.

[@tournamentmaster2000]

@@Iden_in_the_Rain A lot of it is due to the sheer cost of replacing those systems. They're slowly doing it, but it's cost is apparently multiple billioms of dollars to replace these old systems. Financial institutions are heavily interconnected, so changing or updating systems is a long process.

[@jfbeam]

@@smallcube-zn2mm SELinux. And there are many ways to get around it's "protections". (esp. if some moron runs something emailed to them.)

[@jfbeam]

Indeed. Also, they didn't hack SWIFT. They hacked the BANK! using THEIR terminal to make legit SWIFT transactions. Breaking into the SWIFT network is way more involved. (those are very strongly encrypted links, and messages.)

[@eros4510]

As a digital forensics analyst, this was a very good video providing a solid overview on the capabilities of thoroughly planned cyber attacks.

[@klausstock8020]

They apparently had an inside person in the bank.

[@Brianck1971]

All comments that start with "As a..." are BS

[@MemeMan42069]

Imagine being so bad at basic parts of hacking you fumble the ball and turn a 1b heist into an 81m dollar heist.

[@greenerell484]

rip

[@skipius]

How could they know that the US flag their transactions because an Iranian ship somehow...

[@popcorn8153]

@@skipius They were good, but the nuances of the system and the sheer scale of it was too much

[@xijinpooh8210]

This guy thinks 81M gone is just cents.

[@phamminh9806]

tbf, the hacker prolly had a conscience, and 81m could set him up for multiple lifetimes alrdy

[@itsTyrion]

2:00 so... They allowed emails with arbitrary attachments. Several employees just opened the attachment. "Over the following year the hackers..." hold up. They didn't notice someone was in the network for a YEAR!?

[@alessandromorelli5866]

not that easy...the virus is designed to hide itself perfectly, isnt it?

[@wattcch]

use of old software, infrastructure etc explains

[@klausstock8020]

The boss fired all the security experts to save money and make $$$ fast. And the remaining employees were paid so badly, they couldn't even afford clothes!

[@itsTyrion]

@@klausstock8020 .... that explains a lot

[@trailfork7815]

It's the third world none of this is a surprise anymore

[@gnuPirate]

Why are the employees naked while gathered around the printer? Something was very strange about this from the outset.

[@mal2ksc]

How else are they supposed to photocopy their butts? You _know_ that's the first thing techs do when they get a machine working after fighting with it for two days straight.

[@OfficialTraxYT]

@@mal2ksc is that a despicable me reference perhaps?

[@AsilarWindsailor]

@@OfficialTraxYT Nah, people have been doing that for as long as printers had scanners built-in. Perhaps even before when they weren't built-in

[@OfficialTraxYT]

@@AsilarWindsailorive done it before, not too shabby

[@ZipplyZane]

I love how the extra context makes the $81 million seem like a relief rather, as they could have lost 1200% more

[@honjanginamo]

if THIS is your first video, you know the channel is gonna take off, godspeed Cipher!

[@dandeduck]

Yeah, if you start your channel by copying other channel's content and style, then it's pretty easy

[@anythingbenz4005]

So it actually lost them 81 mil since the other transactions didn't go through.

[@jfbeam]

Correct. Many of the transactions were flagged for human verification - too large, too many, etc. And some were canceled due to simple, stupid "typos". Managing to "only" walks away with 81mil is still impressive.

[@Aussie_aNti_h3r0]

Well yes and no, the 1 billion was lost, but mostly found and recovered.

[@NarlyLyfe]

yea that's why the title says the country lost 81 million, lol

[@T1Oracle]

Relying a printer for banking in 2024 is the most ridiculous thing ever. Keep a digital log with cryptographic proof and archive it on hard drives or optical storage. Regardless, as soon as the printer stopped working they should have stopped all transactions.

[@fazlaykhan]

it was 2016, though that is no excuse even for 2016.

[@xM1K3L3x]

The video is so interesting that the clickbaity title really ruins it.

[@MultiSciGeek]

If I'm not wrong Bloomberg published a fantastic article on this. And there's a bunch of good videos on this, including from Jack Rhysider - my fav darknet/hacker podcast (also on YT).

[@Zscach]

Our financial system is a fucking joke. Any 5 year old could point the flaws in this pathetic "system". A fucking weekend is enough for banks to not be able to communicate? Are you fucking kidding me?

[@bluebon5228]

Nobody wants to work on weekends, they want to spend their time on their own or with their family

[@Zscach]

@@bluebon5228 I mean, when you crash your car at 2am on a sunday firefighters will cut you out and paramedics will save your life.... But when hundreds of millions is on the line- money that could save tens of thousands of lives- "I sleep"

[@bluebon5228]

@@Zscach well yeah when you put it that way you are right ,but they should assign few ppl to work on weekends and give them holiday on other day

[@Zscach]

@bluebon5228 exactly. Weird that certain industries just aren't contactable on a certain day of the week

[@generalsociety9607]

It's not just our financial system, mate. Everything, especially the politicians, is a fucking joke.

[@rafisofyan]

Seems that KZbin finally recommended me another awesome channel. Keep up the good work!

[@Cipher-HD]

Welcome aboard!

[@monochr0m]

it's plagiarizing other videos unfortunately

[@lengting]

@@monochr0mhow? It’s all original

[@sh4dic___]

Woah! this is so underated. only 200 views? this deserves way more attention! i loved this video. keep it up bro

[@tonyxforce]

37000, actually

[@djracem8579]

this got me checking the view count and I'm still so shocked it's only at 39k holy moly

[@smallcube-zn2mm]

only 42k now

[@andysaunders3708]

So, on a slightly different note, why are all these animated workers sans trousers? Is it because they had to pay back the billion they lost from their wages, and can no longer afford pants? Hmmm.

[@klausstock8020]

I guess the Boss fired all the expensive cybersecurity specialists and only kept the ones which were paid so badly that they couldn't afford clothes. But I think this ingenious "make $$$ fast" solution backfired.

[@rutgerhoutdijk3547]

0:59 it's not surprising things go wrong if your employees are working in DOS naked

[@peepa47]

Its really funny that banks dont operate during weekends and bank holidays. In an era where everything is 24/7. Imagine airlines operating only 9-17 on weekdays 😀 or hospitals, or taxi drivers, or restaurants and clubs..this is pathetic

[@sjogosPT]

I think its a leftover from 80s and 90s systems maybe. Its only a guess, but i think banks still rely on old procedures from these times and didn't upgrade.

[@shabath]

​@@sjogosPTCute, try going back 15 to 20 more years and you're in the right ballpark.

[@ryanatkinson2978]

Are all these channels affiliated? These super polished and well done channels keep popping up with similar animation styles and everything. The intro is a lot like fern too. I mean I'm not complaining I guess, just wondering what the heck is going on lol

[@epicgamer3030]

I'm not making any claims or anything But the video takes a similar path as Kento Bento's story and it just feels like they changed a couple of sentences and stuff Allegedly

[@kylebisson1498]

​@@epicgamer3030The audio is 100% AI generated as well, uncanny valley good, but definitely AI generated

[@ryanatkinson2978]

@@kylebisson1498 what makes you think it's AI?

[@kylebisson1498]

@@ryanatkinson2978 It's far too convincing to be normal text to speech, which is incapable of making assumptions about broader sentence tone. At the same time, it blurs numerous words together in a fashion that is clearly not a native speaker, but far too smooth to be a non-native speaker. Basically, it mimics the speed variance of natural speech without fully understanding where speech normally speeds up

[@JoshuaFlinn-r5s]

@@kylebisson1498yeah, I noticed the weird cadence changes and blending of words and just assumed a non-native speaker. You’re probably right that it’s AI.

[@aleksszukovskis2074]

clickbait. they ALMOST lost a billion

[@Angel9932]

No, they did lose the money but the majority was recovered. That money was tied up in a transfer and could not be sent to their legitimate customers until it was released.

[@xtsixxltxqt]

You can lose something and still recover partial amounts of it dumb fu,ck

[@benargee]

​​@@Angel9932right but still a net loss much less than $1B

[@VanBurenPhilips]

Yup. "How A Printer Didn't Lose A Country $1,000,000,000." Good story & good video, there's no need for the misleading title.

[@Cyberguy42]

The title is no longer clickbait

[@davidesp00]

This video and channel is severely underviewed and underrated, definitely deserves more attention!

[@Cipher-HD]

Thank you! Hopefully picks up more steam in the next few days :D

[@VcTr04.]

@@Cipher-HD The quality is very much Fern or Hoog like, also the thumbnail. U might not copy but is there any conection?

[@zombieshoot4318]

Insane that banks these days still hold to weekends off.

[@AH-ps3uv]

gameover if that was not the case

[@GamerForLifeDrakunia]

So it was NOT the printer but the hackers, it was NOT 1 BILLION but 122 million... hmmm....

[@BloodZangetsu]

Actually 81 million but yeah

[@markarca6360]

It was attributed to North Korean hackers based in China (Lazarus Group).

[@Antney946]

I want to work at a place where HR doesn't care that half the employees are bare assed naked.

[@KHALIDZARAR606]

awesome video🥰 "FERN" style is getting famous !!(subscribed)

[@verycitrus9815]

Clicked on video because I thought it was a Fern vid. Stayed for the content

[@lu2000luk]

Love your 3D editing style. U literally made me addicted to it now 😡!

[@MarselGaming6000]

u mean the naked butts?

[@needlescars1013]

underrated content.editing, and voiceovers. This chanel will blow up in a couple of months

[@manwithnolife5239]

As someone who works in security, NEVER click on email links you aren't expecting. Most major compromises are because people click on links they shouldn't. I REPEAT: never click on random links!

[@julius4858]

As someone who also works in security: clicking on links almost never harms you. Whatever comes next, does. No hacker is gonna waste their valuable 1click exploit in a stupid fishing email. If you don’t enter your stuff into the page, not much at all can happen.

[@LordMazafeff]

This is why basic on-line awareness training is such a big deal. Dropping a few grand on constant reminders to not accept or launch random apps on your workstation is much cheaper than having a compromised network.

[@hannes6230]

The way the videos are made reminds me strongly of Hoog and fern. Do you have anything to do with the other two channels? Regardless of that, very good quality, keep it up👍

[@glitchdev]

Ye, I believe fern or Simplicissimus (the German channel of fern) already made a Video about this exact topic.

[@odkurzaczelectroluxultraon4999]

:how many ads do you want in your vid? :yes

[@arts-guru7533]

This channel is going to blow up🎉

[@Cipher-HD]

🚀

[@MrGrimm73]

Did you animate this entire video?! That's really impressive regardless lol. GJ, Great vid. Sub earned.

[@andrewalonsi]

KZbin's algorithm is constantly recommending me Hidden Gems, outstanding video! Subscribed and can't wait to see this channel grow!

[@RiadHariri]

Hey Cipher, you're doing an amazing job, top tier story telling, keep up the good work, wish you the best !

[@itsTyrion]

I'm a first time viewer and I'm only 5 minutes in but I really want to compliment the graphics and even extended 3D animations. For the production quality, the amount of views is criminal

[@kartik_adhia]

getting hacked by people from a country that hardly has any access to the internet is 💀💀💀💀

[@MultiSciGeek]

6:50 - Slight misconception. Yes the weekend starts on "Thursday night" meaning generally Fridays and Saturdays are off, Sunday is a working day. Basically Bangladesh being an "Islamic country" means that Friday is rest for them. For Jews is Saturday and for Christians it's Sunday. In fact on avarage people in Bangladesh work 2,232 hours per year, the 7th highest in the world. For context people in the US work 1,765 hours per year, being at 39th place. EDIT: I checked on their official website. Yes, only Fridays and Saturdays are off. Thursdays and Sundays are working days. That graphic is really really misleading.

[@canadianjoe1]

😞for a minute there I really thought Bangladesh had some sort of deeply rooted culture of work/life balance or something

[@jacobmarciniec]

I love how hackers can make sophisticated software that defeat highly secure systems, but then misspell "foundation"

[@soejrd24978]

Hey, it's offbrand Fern

[@TiesOfZip]

The printer constantly printing transactions felt superfluous until the malware starts policing its brass.

[@ninguern7693]

In other words: The hackers where smart enough to not get cought and the USA inteligence wasn't willing to admit that a civilians could outsmart them, so they blamed North Korea.

[@klausstock8020]

Because workers in North Korea have about zero rights. In about every other country, "hackers" enjoy a 9-to-5 job. Yes, the time of an attack can indicate which time zones the "hackers" are in. Only in North Korea, hackers are forced to work overtime, every day. Although many North Korean hackers from outside the country, as the North Korea has only a pool of 1000 IP addresses (some sponsored from China). However, it's still not easy to defect from the North Korean Cyber Army (although a few did). Yup, Cyber Army, not civilians (just like APT28 is just a short name for Russia's General Staff Main Intelligence Directorate 85th Main Special Service Center military unit 26165). Oh well, and malware analysts will find similarities in the attach and code, which they can connect to previous and future attacks, groups and states. Although the malware was suspected to have originated in Russia, it's similar to other malware used by Lazarus Group. And a North Korean C2C server IP address was identified during the analysis. I do not know what happend to the accomplice (or the accomplices) in the Bangladesh bank, and whether they could provide any information about the attackers. Note that North Korean groups have large overlaps, and Lazarus Group is the name given for all North Korean state-funded groups. The subgroup behind the Bangladesh is probably APT38. Yes, I consider it plausible, even though *I* cannot prove it..

[@musicbysazid]

Damn, this is so high quality content. You earned a sub, mate

[@MaxScholzJaeger]

Not a great fan of the clickbait title. Great video, but that kind of ruines it.

[@ralfbaechle]

Printers and security ... In '95 I was briefly working at a company which had no internet connection. The internal network was using arbitrary IP addresses, not RFC 1549 private IPs. Eventually the company got internet which meant we had to renumber the network. Somehow that was mostly working right but printing didn't work for a few clients. Turns out these machines somehow had not picked up the IP address change of the printer and were still printing to the old IP address. Here's were Murphy enters the stage. The IP address happened to be an actual printer somewhere in Sweden and it happily accepted print jobs from Germany.

[@nilacof]

🤣

[@bigsmelly1262]

I am astounded this video only has 1.6k views, this deserve's at least 100k for how quality it is

[@Cipher-HD]

Thank you so much! That definitely motivates us to keep producing great content.

[@webdevgillett]

When I watched this, I thought this channel had atleast 1M Subs, but only 2K!? your underrated!

[@Cipher-HD]

Thanks for the support!

[@MuscarV2]

You're*

[@ZacksScraps]

"This is not an ordinary printer" *Proceeds to describe an ordinary printer*

[@asmsayeem3973]

Excellent editing and storytelling. Way to go!

[@Cipher-HD]

Means a lot, thank you so much!

[@paulushdk]

thats an very impressive first video! im your 12,101st follower :D

[@MrWendal]

How a printer lost a country $81,000,000 ...I still woulda clicked, so why the lies?

[@bigbananasam]

This is the highest quality first KZbin video I think I’ve ever seen! Phenomenal content

[@mriz]

nice video essay dude, keep it up!

[@Cipher-HD]

Thank you! Lots more coming in the future 😉

[@hi1ton]

Received a huge "lump of sum" now that's suspicious!

[@RWCO]

Great video! You guys need more views for this kinda content

[@Cipher-HD]

Thank you so much!

[@Badboyrecapper-ue1us]

Imagine being a mastermind of this hacking project.

[@markarca6360]

North Korean hackers, to be exact.

[@AKAK-rh7lr]

Multiple bank employees opened zip files from EMAILS?! 😭😂 Great video so far, 2:24 is pretty

[@jfbeam]

Yeap. Stupid is as stupid does, as they say. Or in the immortal words of Ron White, "you can't fix stupid." (but I can disable their access.)

[@slavko321]

It is actually quite sad people think opening zip files would be a problem. It is just a file with compressed data. The problem was surely in the operating system and they probably werent using linux. But hey add more workarounds about whatbis dangerous instead of handling the core issue that is windows (which could mostly be replaced by a browser kiosk).

[@AKAK-rh7lr]

@@slavko321 It had malware, lol.

[@AKAK-rh7lr]

@@slavko321 It’s just that, you’re not supposed to open any files or really go to any links as one of these employees. Qubes is better 😫😫

[@AKAK-rh7lr]

@@slavko321 Qubes better anyway

[@tomtramp5667]

A game at a casino you get 90% back... so a game that only exists for money laundering. Hackers: "We have $10,000,000 we need to wash" Casino: "We charge 10%" Hackers: "sounds good" Casino: "Here is your $9,000,000, thank you for your business" I would half doubt anyone actually played anything.

[@craciu25yt]

for few seconds I thought it was a fern video

[@USELECKSIONS]

Yes 👍

[@Nitsudog]

In the aftermath, RCBC got slapped with the biggest fine ever levied by the Bangko Sentral (Philippines' Central Bank) and their CEO was forced to resign because of this booboo. KYC / AML controls also got significantly tighter system-wide after this fiasco - not that there aren't significant loopholes still in place in the financial system, but I can say it got significantly smaller.

[@ElijahCiali]

Great video y'all! Staying tuned for more

[@Cipher-HD]

Thanks! Only going to keep getting better and better :)

[@chounoki]

How stupid is the hacker who needs to use a malware to know that the bank is using SWIFT.

[@F4llenGrizz]

This video is insane! Next level editing

[@Cipher-HD]

Thank you so much!

[@JortsDead]

Bro I fucking love this animation style.

[@ayy_loui]

That's truly an underrated channel right here! Use me as a "Under 5K GANG" Button

[@Malachite_Jab]

The hacker: how ba-a-a-a-d can i be? 🎵🎵🎶🎶

[@mattpierre891]

I used to work for a commercial printing company. The sales rep for the super high-end digital printer told us her didn't sell printers, he sold ink.

[@feynthefallen]

Phishing is still so ridiculously easy, it's a disgrace. Even well-trained, educated people just cant get it through their thick skulls that there are more important things in business than pleasing your manager and getting the completely, totallly, utterly insignificant business report done on time. It's no wonder the phishing business is booming.

[@kraska_gopro]

This is the best video I've ever seen. Great explanation, animations etc.

[@looker999997]

I like how they're all buck-naked in that office, except for that one guy wearing a sweater.

[@simplexicated]

I love how Zubair's colleagues are butt naked.

[@snotspat]

Wow. They "learned" that the bank used S.W.I.F.T. Stopped watching right there.

[@dominikmilien]

Subbed yesterday since I immediately fell in love with the content. There's 22k subs now (2.8.2024) - just making myself a note when you'll hit 500k in a year ❤❤

[@TrasherBiner]

I wish youtube algorithm would stop recommending me "famous hackers" tales that I don't give a flying fuck about and literally everybody has known forever.

[@sujaynaidu]

Lemmino style videos are a blessing!

[@delinquenter]

When they say, printer are scamming machines, this is not, what they mean. But it still doesn't make it any less true xD

[@Tamay.]

Remember theres thousands of these printers publicly on VNC without authentication that anybody can access

[@Shajirr_]

Its crazy the the world's whole financial system is ran by banks who can just... decide not to work on certain days

[@akam9919]

"But they faced three significant road blocks. First, the printer--" *Boss Music*

[@CMDRSweeper]

Well after the Lockheed Martin hack, there were talks that one of the ingress points into Lockheed Martin's network was via the printer as well. However, no confirming or post action report came out confirming or denying that.

[@TheWarrior1256]

Fantastic video, underrated channel

[@vyperegg123]

this bank is literally every place in every movie ever that gets robbed flawlessly

[@JamesCAsphalt8]

One of the challenges that was not mentioned in the video is that the bank workers have no face and so, could not read their computer screens.

[@Christopher-ir8hb]

Keep up the good work. A million subscribers loading...

[@UncleKennybobs]

It was exactly the reason I thought. I can't think of any other reason.

[@rndargis0]

only 9K subs and that level of editing ? you are bound to succes

[@viniciusdzn]

Bro the production of this video is absolute insane! Hi from br :) 🇧🇷