October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
The Finance Base
The Money Desk · Blog
Re:

FBI Briefs Bank Executives on Operation Ababil DDoS Campaign

The FBI briefed bank security leaders on Operation Ababil as federal agencies shared attack indicators and coordinated with financial institutions to mitigate DDoS disruptions.
From TheFinanceBase Team3 min to read
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

In 2013, the FBI briefed bank security executives about Operation Ababil, a distributed denial-of-service (DDoS) campaign that disrupted access to major U.S. financial websites. The briefings were part of a wider response: federal agencies shared threat information and attack indicators with banks so they could prepare for and mitigate subsequent attacks.

What the FBI briefed banks about

A May 14, 2013, Dark Reading report said FBI officials used secure videoconferences to brief bank executives and security officers on Operation Ababil. The report, citing FBI executive assistant director Richard McFeely at the Reuters Cybersecurity Summit, said the briefings covered who officials believed was behind the attacks. It described recurring attacks against major U.S. banks and said customers sometimes could not access online or mobile banking.

The campaign’s label and public claims of responsibility appeared in contemporaneous coverage, but those claims should not be treated as a settled account of attribution. A later official description came from the Justice Department, which announced charges and summarized allegations in an indictment; those allegations were not court findings.

How the campaign affected banking services

In testimony to the Senate Banking Committee on December 10, 2014, FBI Cyber Division Assistant Director Joseph M. Demarest said that actors began launching powerful DDoS attacks against major U.S. banking institutions in September 2012. He described attackers combining bandwidth from numerous web servers in a botnet to overwhelm targets.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sonicwall 01-SSC-6942 TZ105 UTM Secure Firewall
  • Firewall Protection: Remote Access Authentication, Content Filtering, Malware Protection, URL Filtering, Web Content Filtering, Deep Inspection Firewall, Reassembly-free Deep Packet Inspection, and
  • Firewall Protection (continued): Gateway Antivirus, Anti-spyware, Denial of Service (DoS), Distributed Denial of Service (DDoS), Egress Filtering, Cookies Blocking, Dead Peer Detection
  • Encryption Standard: DES, 3DES, AES (142-bit), AES (128-bit), AES (256-bit), SHA-1, MD5 Intrusion Prevention, NAT, PAT, IPSec NAT Traversal, 5 Network (RJ-45) Ports, Fast Ethernet, 10/100Base-TX
  • Virtualization: 8000 x Maximum UTM/DPI Connections, 8000 x Maximum Connections, 1000 x New Connections/Sec, 1 x SonicPoints Supported, 5 x Site-to-Site VPN Tunnels, 5 x VLANS
  • USB Port, AC Adapter (Power Source) 12 V DC, Management Port, 32 MB Flash Memory, 256 MB Standard Memory, Secure Digital (SD) Card , Height: 1.4", Width: 7.5", Depth: 5.6

In its March 24, 2016, announcement of charges against seven Iranian nationals, the U.S. Department of Justice said the indictment alleged a campaign against 46 major companies, primarily in the U.S. financial sector, from late 2011 through mid-2013. The DOJ described attacks that became near-weekly after September 2012. According to the allegations, on some days victim servers received as much as 140 gigabits per second of traffic, and hundreds of thousands of customers were cut off from online account access. The announcement said the campaign disrupted services but did not result in theft of customer account data.

The DOJ explicitly said the charges were accusations and that defendants are presumed innocent unless and until proven guilty. The figures and description above refer to the indictment allegations, not adjudicated findings or current threat levels.

Rank #2
FortiGate-120G Network Security Appliance Plus 1 Year FortiGuard Unified Threat Protection (UTP) and FortiCare Premium (FG-120G-BDL-950-12)
  • Comprehensive Hardware and Service Package: Includes FortiGate-120G appliance with 1 year of FortiCare Premium and FortiGuard Unified Threat Protection (UTP).
  • Unified Threat Protection (UTP) Bundle: Protects against sophisticated web and DNS-based threats with advanced filtering and security features including ATP, DNS filtering, URL filtering, video filtering, and anti-botnet services.
  • Enhanced Web Security: Offers high-level web security suitable for varied enterprise environments needing strong protective measures against online threats.
  • Extended Support and Service: FortiCare Premium provides dependable technical support ensuring seamless operation and efficient issue resolution.
  • Optimal for Diverse Deployment: Ideal for organizations with complex network environments looking for comprehensive security solutions.

How agencies and banks coordinated their response

Demarest’s 2014 testimony described an effort involving the FBI, the Department of Homeland Security, Treasury, and financial institutions. The FBI and DHS distributed Joint Indicator Bulletins containing thousands of IP addresses associated with the attacks; banks used those indicators to help mitigate later incidents. Government briefings also gave bank security teams threat context and a place to share practices.

Measure reported by the FBI What Demarest reported
Classified threat briefings Approximately 36 from March 2013 to July 2014, for private-sector financial institutions and government agencies.
Initial briefing More than 300 chief information security officers attended on March 19, 2013, by secure video conference from 33 FBI field offices.
FBI Liaison Alert System messages 34 messages from April 2013 to July 2014; about 20 dealt with financial-sector threats.
Compromised-system indicators Indicators for approximately 115,000 compromised systems were disseminated in those messages.

These are separate measures reported in Demarest’s December 10, 2014, Senate testimony. They describe the scale of that historical response, not a present-day FBI program or a single count of affected banks or customers.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
ASURION 3 Year Major Appliance Protection Plan ($350 - $399.99)
  • No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
  • Coverage: Plan starts on the date of purchase. Malfunctions covered after the manufacturer's warranty. Power surges covered from day one. Plan includes food loss reimbursement up to $250 per approved claim for refrigerators & freezers and laundry services reimbursement up to $25 per approved claim for washers & dryers that are out for service for more than seven (7) consecutive days.
  • Easy Claims Process: File a claim anytime online or by phone. Most claims approved within minutes. If we can’t repair it, we’ll send you an Amazon e-gift card for the purchase price of your covered product or replace it.
  • Product Eligibility: Plan must be purchased with a product or within 30 days of the product purchase. Pre-existing conditions are not covered.
  • Terms & Details: More information about this protection plan is available within the “Product guides and documents” section. Simply click “User Guide” for more info. Terms & Conditions will be available in Your Orders on Amazon. Asurion will also email your plan confirmation with Terms & Conditions to the address associated with your Amazon account within 24 hours of purchase.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What the episode means for bank readiness

The practical lesson is about service continuity as much as cybersecurity: a DDoS attack can make a bank’s public website or account access unavailable even when the stated DOJ account says customer account data was not stolen. The OCC’s April 3, 2014, Bulletin 2014-14, summarizing joint FFIEC guidance, said institutions should include DDoS readiness in ongoing information-security and incident-response plans.

  • Monitor incoming traffic to public websites so unusual surges can be identified.
  • Activate incident-response plans when an attack is suspected.
  • Plan staffing for the duration of an incident, including suitable previously contracted third-party services where appropriate.
  • Community banks should ensure their IT units or service providers take appropriate action.

The OCC bulletin is dated 2014 guidance; financial institutions should verify current regulatory requirements independently rather than treating it as a complete statement of today’s compliance obligations.

Quick Recap

Bestseller No. 3
ASURION 3 Year Major Appliance Protection Plan ($350 - $399.99)
ASURION 3 Year Major Appliance Protection Plan ($350 - $399.99)
No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
$68.99
Bestseller No. 4
ASURION 3 Year Major Appliance Protection Plan ($500 - $599.99)
ASURION 3 Year Major Appliance Protection Plan ($500 - $599.99)
No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
$89.99
Bestseller No. 5
ASURION 3 Year Major Appliance Protection Plan ($1000 - $1249.99)
ASURION 3 Year Major Appliance Protection Plan ($1000 - $1249.99)
No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
$149.99
Best Value
ASURION 3 Year Major Appliance Protection Plan ($1000 - $1249.99)
  • No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
  • Coverage: Plan starts on the date of purchase. Malfunctions covered after the manufacturer's warranty. Power surges covered from day one. Plan includes food loss reimbursement up to $250 per approved claim for refrigerators & freezers and laundry services reimbursement up to $25 per approved claim for washers & dryers that are out for service for more than seven (7) consecutive days.
  • Easy Claims Process: File a claim anytime online or by phone. Most claims approved within minutes. If we can’t repair it, we’ll send you an Amazon e-gift card for the purchase price of your covered product or replace it.
  • Product Eligibility: Plan must be purchased with a product or within 30 days of the product purchase. Pre-existing conditions are not covered.
  • Terms & Details: More information about this protection plan is available within the “Product guides and documents” section. Simply click “User Guide” for more info. Terms & Conditions will be available in Your Orders on Amazon. Asurion will also email your plan confirmation with Terms & Conditions to the address associated with your Amazon account within 24 hours of purchase.
Rank #4
ASURION 3 Year Major Appliance Protection Plan ($500 - $599.99)
  • No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
  • Coverage: Plan starts on the date of purchase. Malfunctions covered after the manufacturer's warranty. Power surges covered from day one. Plan includes food loss reimbursement up to $250 per approved claim for refrigerators & freezers and laundry services reimbursement up to $25 per approved claim for washers & dryers that are out for service for more than seven (7) consecutive days.
  • Easy Claims Process: File a claim anytime online or by phone. Most claims approved within minutes. If we can’t repair it, we’ll send you an Amazon e-gift card for the purchase price of your covered product or replace it.
  • Product Eligibility: Plan must be purchased with a product or within 30 days of the product purchase. Pre-existing conditions are not covered.
  • Terms & Details: More information about this protection plan is available within the “Product guides and documents” section. Simply click “User Guide” for more info. Terms & Conditions will be available in Your Orders on Amazon. Asurion will also email your plan confirmation with Terms & Conditions to the address associated with your Amazon account within 24 hours of purchase.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More post from the Money Desk

  1. The Money DeskBlogTheFinanceBase07 MAR 2625 minWhat Is a 457 Plan?
  2. The Money DeskBlogTheFinanceBase07 MAR 2621 minTime Value of Money: What It Is and How It Works
  3. The Money DeskBlogTheFinanceBase07 MAR 2627 minAre You Living in One of These Top 10 Most Expensive Cities to Retire?
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.