27 July 2016
Find out more

Santander denies online banking hack

19 April 2011  |  13590 views  |  0 biometric eye

Santander has denied that cybercrooks have hijacked the online banking login page of its Alliance & Leicester unit.

Alarm bells were sounded yesterday when an A&L customer took to technology and programming forums at Stack Overflow and Linode over security concerns with the site.

The customer says he was prompted with a SSL certificate warning for 'www.polycache.com' when attempting to log in to A&L Internet banking via FireFox 4.

Forum members worked to unravel the mystery and decipher the JavaScript. The issue was picked up by Finextra blogger Adam Nybäck who notes that it appeared that at the heart of the matter lies an injection which tries to look like an ordinary web analytics URL.

"It goes to a script at advanced-web-analytics.com which downloads another script from polycache.com which seems to hijack the login part of the site," says Nybäck.

However, Santander has told Finextra that the problem seems to be the result of a "technical failure" at a third party it taps for its online banking systems.

Says a spokesman: "This is currently being investigated further. However, Santander can confirm that neither its website nor the A&L website have been hacked and customer data has not been compromised."

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

RSA hacked: SecurID two factor authentication data leaked

RSA hacked: SecurID two factor authentication data leaked

18 March 2011  |  17159 views  |  0 comments
A&L account migration to Santander platform causes e-banking problems

A&L account migration to Santander platform causes e-banking problems

12 August 2010  |  9154 views  |  0 comments
Zeus Trojan gets makeover to beat Firefox

Zeus Trojan gets makeover to beat Firefox

21 April 2010  |  12730 views  |  0 comments
IT integration project pays off for Santander UK

IT integration project pays off for Santander UK

28 October 2009  |  6611 views  |  0 comments
Santander to seek £65 million IT savings in A&L takeover

Santander to seek £65 million IT savings in A&L takeover

14 July 2008  |  9346 views  |  0 comments

Related company news

 
Find out moreVisit www.abe-eba.euVisit capgemini.com

Top topics

Most viewed Most shared
satelliteContactless Bitcoin startup Plutus Tap &am...
9359 views comments | 9 tweets | 4 linkedin
MasterCard agrees £700m VocaLink acquisitionMasterCard agrees £700m VocaLink acqu...
9258 views 14 comments | 32 tweets | 38 linkedin
Apps crush internet for UK banking loginsApps crush internet for UK banking logins
7836 views comments | 18 tweets | 25 linkedin
hands typing furiouslyHow machine learning can cut costs on tran...
5941 views 0 | 9 tweets | 3 linkedin
Thomson Reuters and Imperial College form fintech and regtech research partnershipThomson Reuters and Imperial College form...
5910 views comments | 29 tweets | 16 linkedin

Featured job


Brussels (Belgium) or Paris (France)

Find your next job