Following a hacking of servers of city-headquartered Cosmos Bank, Rs 78 crore were withdrawn "physically" from 28 countries including the UK, USA, Russia and the UAE using cloned ATM cards, the police said on Friday.
On August 11 and 13, unidentified hackers targeted the bank's ATM switch server and stole details of VISA and Rupay ATM cards. They also attacked the interbank SWIFT system, and siphoned off Rs 94 crore in total.
"The United Kingdom, United States, Russia, United Arab Emirates and Canada are among 28 countries from where Rs 78 crore were withdrawn physically, using cloned cards," said Jyotipriya Singh, Deputy Commissioner of Police (Cyber and Economic Offences Wing).
The cyber cell was getting in touch with law enforcement agencies of these countries for further action, she said.
The hackers must have done some kind of "recce" (study) of the bank's system, she said.
"We suspect that the bank must have received some sort of alerts before the attack and we are waiting for the security audit report from the bank," DCP Singh said.
The cyber cell's aim now is to find out the "money mules" who were used to withdraw the money using ATMs in foreign countries, she said.
The police have recovered around Rs four lakh from the genuine Cosmos cardholders, who had visited ATMs when the malware (malicious software installed by hackers in the bank's system) was active and withdrew more money than their account balance, she said.
"These people are original cardholders, who, out of greed, withdrew money from the ATMs during the time the malware or proxy switch server was active," Ms Singh said.
Election Results for Lok Sabha Election 2019 will be out on May 23. Get the latest election news and live updates on ndtv.com/elections. Catch all the action on NDTV Live. Like us on Facebook or follow us on Twitter and Instagram for news updates from each of the 543 parliamentary seats for the election 2019