And you people wonder why they tried to switch the internet off. Khosrow Zarefarid, an Iranian software manager, warned Iran’s banks’ CEOs of a security flaw in the banking system. When nobody responded, Khosrow hacked 3 million accounts across 22 banks, then dropped these details — including card numbers and PINs — on his blog.
Which, I guess, probably did prove his point reasonably well. Reports suggest that Zarefarid didn’t steal anything himself, but the internet’s a big ol’ place, so that doesn’t mean nobody stole anything when he put card numbers and PINs up online.
Three Iranian banks – Saderat, Eghtesad Novin, and Saman – have already warned customers to change their debit card PINs.
Apparently Zarefarid tried to warn said banks of the security flaws about a year ago.
Zarefarid is reportedly no longer in Iran.
[Source: ZDN]