News for hackers. Stuff that matters.
Re:Finance worker pays out $25M after VC with deepfake CFO by blibble on Sunday February 04, 2024 @10:55AM (#39251231)
in financial services everything you can possibly doing for your regular job has an approval chain (often consisting of at least 3 people)

install notepad++ from pre-packaged store? approval needed

change to mailing list you own? approval needed

1 line config change to production alerting system? 8 approvals needed

I can easily imagine people just clicking Approve sometimes without reading

Re:Finance worker pays out $25M after VC with deepfake CFO by ponector on Sunday February 04, 2024 @11:36AM (#39251692)
And then you hear stories like that one about french trader Jérôme Kerviel who did unauthorized trades with 5 billion losses.

And many more stories like that.

But yes, for small fish there is an approval process for everything, even to but a paper clip.

Re:Finance worker pays out $25M after VC with deepfake CFO by blibble on Sunday February 04, 2024 @11:42AM (#39251762)
controls applied to traders are very different

a common thread in these modern rogue trader scandals are that the perp worked on the controls or monitoring system in a role prior to becoming a trader

so they knew how to structure their trades in such a way to evade detection

Re:Finance worker pays out $25M after VC with deepfake CFO by Aurornis on Sunday February 04, 2024 @11:01AM (#39251286)
I feel like I’m missing something from your post. Are you being asked to approve several large financial transactions per hour in your job as a software engineer?

Regardless, approvals for multi-million transfers require a higher level of process and approval.

Re:Finance worker pays out $25M after VC with deepfake CFO by blibble on Sunday February 04, 2024 @11:05AM (#39251343)
I think you underestimate the scale here, a "multi-million" dollar transaction is something that happens tens of thousands of times a day

> Regardless, approvals for multi-million transfers require a higher level of process and approval.

if you say so

Re:Finance worker pays out $25M after VC with deepfake CFO by cjalmeida on Sunday February 04, 2024 @11:59AM (#39251955)
Maybe, but those multi-million transfers are usually going to known trusted counterparties (other brokers, bank treasuries), not random vendor accounts.