Global retail and commercial banks are facing an increasing risk of cyber attacks as their operations become more digitised, Moody's Investors Service has warned in a new report.
Cyber attacks can in turn end up impacting a bank's credit standing through financial losses, erosion of brand value and regulatory consequences, the rating agency added.
The Moody's research for the report suggests that cyber attackers target banks in developed and developing markets alike.
Lazarus group behind recent cyberattack on South Africa - Kaspersky
The report found that financial losses commonly occur via theft and fraud, and they generally affect banks through one-off reductions in profit and potentially capitalisation. More lasting franchise erosion, with indeterminate losses, can result from large data breaches or business disruption.
According to the report, the costs incurred from cyber attacks can escalate quickly as they increase in sophistication and simultaneously target multiple institutions.
Furthermore, the increasing popularity of social networks can also be abused to quicken the propagation and increase the ferocity of cyber attacks, amplifying their potential to destabilise the financial system. In more extreme cases, this could threaten the viability of the targeted bank, states the report.
According to Kaspersky's Managed Detection and Response Analytics Report, sophisticated targeted attacks often use so-called "living off the land" techniques, which hide malicious activity within legitimate user and administrator behaviour.
"If you don't see a large number of 'false-positive' events in your network, that probably means that you are missing a lot of important security incidents," says Sergey Soldatov, head of the security operation centre at Kaspersky.