Egregious violations of the bank’s security procedures have also been uncovered. On the day of the robbery, its security cameras were disabled. A number of security protocols need to be met before the SWIFT system authorises a payment: one step, a physical key or dongle, was left plugged in for weeks, rather than locked away. Five of the hackers’ 70 messages were accepted as genuine by the New York Fed. But for basic slip-ups (some payment instructions, for example, were incomplete) the thieves could have made off with $1bn.
银行安全程序的异常入侵也已经被揭露出来了。在案发当天,银行的监控摄像全部失效了。在SWIFT系统授权转账之前,需要满足许多安全协议:其中一步就是物理钥匙或者加密狗忘了插上长达数周,而不是被锁定。黑客发送的70条信息中的5条被纽约联邦政府认证,但是,由于有一些基本的错误(例如,转账指示不完整),不然这些盗贼就可以带着十亿美元逃之夭夭。