25 April 2018
visit www.nextgenbanking.co.uk

Santander denies online banking hack

19 April 2011  |  14404 views  |  0 biometric eye

Santander has denied that cybercrooks have hijacked the online banking login page of its Alliance & Leicester unit.

Alarm bells were sounded yesterday when an A&L customer took to technology and programming forums at Stack Overflow and Linode over security concerns with the site.

The customer says he was prompted with a SSL certificate warning for 'www.polycache.com' when attempting to log in to A&L Internet banking via FireFox 4.

Forum members worked to unravel the mystery and decipher the JavaScript. The issue was picked up by Finextra blogger Adam Nybäck who notes that it appeared that at the heart of the matter lies an injection which tries to look like an ordinary web analytics URL.

"It goes to a script at advanced-web-analytics.com which downloads another script from polycache.com which seems to hijack the login part of the site," says Nybäck.

However, Santander has told Finextra that the problem seems to be the result of a "technical failure" at a third party it taps for its online banking systems.

Says a spokesman: "This is currently being investigated further. However, Santander can confirm that neither its website nor the A&L website have been hacked and customer data has not been compromised."

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

RSA hacked: SecurID two factor authentication data leaked

RSA hacked: SecurID two factor authentication data leaked

18 March 2011  |  17766 views  |  0 comments
A&L account migration to Santander platform causes e-banking problems

A&L account migration to Santander platform causes e-banking problems

12 August 2010  |  9686 views  |  0 comments
Zeus Trojan gets makeover to beat Firefox

Zeus Trojan gets makeover to beat Firefox

21 April 2010  |  13330 views  |  0 comments
IT integration project pays off for Santander UK

IT integration project pays off for Santander UK

28 October 2009  |  7307 views  |  0 comments
Santander to seek £65 million IT savings in A&L takeover

Santander to seek £65 million IT savings in A&L takeover

14 July 2008  |  11688 views  |  0 comments

Related company news

 
Visit http://go.jumio.com/finextraAdVisit www.nextgenbanking.co.ukVisit http://response.ncr.com

Top topics

Most viewed Most shared
Top tier banks pass first transactions on trade finance blockchainTop tier banks pass first transactions on...
14653 views comments | 21 tweets | 28 linkedin
TransferWise becomes first non-bank to open settlement account with BofE RTGSTransferWise becomes first non-bank to ope...
11389 views comments | 18 tweets | 32 linkedin
'Fake data' will make banks vulnerable - Accenture'Fake data' will make banks vulnerable - A...
9653 views comments | 26 tweets | 36 linkedin
Major card schemes zero in on single 'buy' button for online commerceMajor card schemes zero in on single 'buy'...
8737 views comments | 20 tweets | 36 linkedin
Irish central bank tunes in to fintechIrish central bank tunes in to fintech
8721 views comments | 20 tweets | 21 linkedin

Featured job

Find your next job