Exim Bank
Exim Bank
Export Import Bank of Romania EximBank S.A. was established in 1992 as a joint stock company, with the Romanian state as majority shareholder.
Red Teaming
Penetration Testing
IT Systems Audit
Vulnerability Assessment
Key Risks:
- Assessing whether a remote attacker could penetrate EximBank’s defenses.
- Evaluating if a network user without access rights or an attacker could access the payment systems network, using the PCI DSS guidelines.
- Examining if a user of the Internet banking application could obtain unauthorized elevated privileges.
- Estimating the impact of a security breach on the company’s private data confidentiality.
Key Issues and Challenges:
- Identifying and mitigating possible entry points for potential attackers.
- Ensuring adherence to PCI DSS guidelines while granting network access rights.
- Preventing unauthorized privilege escalation within the Internet banking application.
- Maintaining the confidentiality of company’s private data even in the event of a security breach.
Scope:
The testing scope involved EximBank’s corporate network, internal critical application, and the Internet Banking application.
Results:
Detailed results were based on the identification and exploitation of security weaknesses that could potentially allow a remote attacker to gain unauthorized access to organizational data. CyBourn utilized the information gleaned from this evaluation to address vulnerabilities and bolster EximBank’s security posture.