Tesco Bank 'Hack' Still a Mystery
Summary
The Daily Telegraph ran a story headlined: Spy agency GCHQ investigates Tesco Bank cyber theft amid fears it was state sponsored. In fact the report itself makes clear that it is the UKs new National Cyber Security Centre (NCSC) that has been contacted. If the bank had been breached in the usual hack and steal manner, it would normally take weeks if not months of forensic examination to ensure that there are no intruders on the network, and no hidden malware left behind. Putting all of these together (Tesco bank knows what happened, it is over, and its systems were not compromised), there seems to be a strong implication that this was not a standard criminal hack. Commenting on the FAQ Q&A, CensorNets CEO Ed Macnair said, "They may have discovered that Tesco Bank itself wasnt attacked but rather a third-party supplier, or that all those customers were the victims of phishing scams.