Denial-of-service attacks disrupt Nordea online banking services in Finland

While denial-of-service attacks disrupt online services for banks, experts state that they do not pose a threat to data security. This was discussed by specialists during Yle’s morning program on Tuesday.

A denial-of-service attack aims to congest a specific website by flooding it with traffic from numerous sources, preventing genuine users from accessing the site’s services normally. This issue gained attention following disruptions in Nordea’s online banking services last weekend. Some customers reported that their account information was completely missing, or their balances appeared as zero, sparking concerns about online banking security.

Nordea explained on Sunday that the issues were caused by technical adjustments and denial-of-service attacks. On Tuesday, the bank announced further disruptions.

F-Secure’s Chief of Cyber Threat Intelligence, Laura Kankala, clarified the distinction: “A denial-of-service attack may sound like a breach of data security, but this is not the case.” She noted that such attacks are only one reason for service disruptions, which could also result from maintenance issues or programming errors. She expressed confidence in the security measures of Finnish banks, stating they have invested considerable time and resources to protect customer data and funds.

Kankala suggested that there is a need for clearer terminology. “The term ‘denial-of-service attack’ sounds more dangerous than it really is, as it simply indicates a temporary service disruption.”

While attacks cannot be completely prevented, they can be mitigated through various methods, including the use of packet scrubbing technologies to identify legitimate users and block traffic from attackers. Public attention during such attacks often serves to promote the attacker’s agenda, as criminals monitor media coverage to leverage against institutions.

To protect home networks, Traficom’s cybersecurity expert offers tips for safeguarding routers: change default passwords, enable automatic updates to fix vulnerabilities, and disable remote access. While these measures may not prevent denial-of-service attacks, they can enhance overall security.