Hackers steal Western Michigan University professor's paycheck
1–10 of 42 posts
Re: Hackers steal Western Michigan University professor's paycheck
#2The same thing happened recently at BU, but our school is covering all losses even though I think the users are at fault in our case:
At BU it was people that responded to a fishing email that had their account info changed.
http://www.bu.edu/today/2014/fighting-phishing-bu-moratorium...
Re: Hackers steal Western Michigan University professor's paycheck
#3Yay. That's the kind of world I've always wanted to live in.
Gooooo, Justice! — Really, get the fuck out!
Re: Hackers steal Western Michigan University professor's paycheck
#4UK resident: My wages are paid into my bank account using an electronic payments system that does not use the Internet at all. The accounts/HR people have computers that are on a separate VPN from the rest of us.
The attack mode in this case revolved around the use of a client system to tell HR/Payroll where to pay the money. We don't do that, any change in bank account details is a visit to an office with paperwork.
Re: Hackers steal Western Michigan University professor's paycheck
#5UK resident: My wages are paid into my bank account using an electronic payments system that does not use the Internet at all. The accounts/HR people have computers that are on a separate VPN from the rest of us. The attack mode in this case revolved around the use of a client system to tell HR/Payroll where to pay the money. We don't do that, any change in bank account details is a visit to an office with paperwork.
If you read the article, it specifically says in the fourth paragraph: "However, he said he believes the university should reimburse him for his loss, since it was its system that was hacked.".
It wasn't his banking account being phished, you should read the linked articles before commenting on things.
Re: Hackers steal Western Michigan University professor's paycheck
#6UK resident: My wages are paid into my bank account using an electronic payments system that does not use the Internet at all. The accounts/HR people have computers that are on a separate VPN from the rest of us. The attack mode in this case revolved around the use of a client system to tell HR/Payroll where to pay the money. We don't do that, any change in bank account details is a visit to an office with paperwork.
If you read the article, it specifically says in the fourth paragraph: "However, he said he believes the university should reimburse him for his loss, since it was its system that was hacked.". It wasn't his banking account being phished, you should read the linked articles before commenting on things.
Edit: yes, I made it to the last paragraph and realised that you actually allow people to change account details from a client computer. I shall read every word in future.
Re: Hackers steal Western Michigan University professor's paycheck
#7Off topic: A professor just earns $1,581 per month?
Re: Hackers steal Western Michigan University professor's paycheck
#8>> A hacker had gotten into Cool's WMU account and changed the routing number for his payments, he said, sending $1,518.62 to a bank in Utah..... There was $11.08 left in the Utah account, which is all Cool has gotten back of his paycheck.
Just curious. A professor is paid only $1,529.70 ? Hope it is weekly.
Re: Hackers steal Western Michigan University professor's paycheck
#9Off topic: A professor just earns $1,581 per month?
Depends on professor status. Adjunct professors, maybe. If it's not really full-time and they aren't researching anything, then why should they get paid a ton?
Re: Hackers steal Western Michigan University professor's paycheck
#10UK resident: My wages are paid into my bank account using an electronic payments system that does not use the Internet at all. The accounts/HR people have computers that are on a separate VPN from the rest of us. The attack mode in this case revolved around the use of a client system to tell HR/Payroll where to pay the money. We don't do that, any change in bank account details is a visit to an office with paperwork.
I've lost a payment in a similar fashion before. The accounts team took the written paperwork and misinterpreted a 6 for a 0 (I didn't write the form) and it just happened to be a valid destination account number. It took me 2 weeks to get the payment back.
Doesn't always come down to technology.
In fact, when it comes to technology it's usually pretty good. Humans on the other hand always err on the side of incompetence as there's usually someone else to blame...
If you do not believe this about humans, work in or for the public sector in the UK for a bit!