Chinese security head pulls a practical joke and steals from his own bank

Date:

Share post:

This may seem like a scene straight out of a heist movie, but a Chinese programmer did something as spectacular. Qin Qisheng, a former manager in Huaxia Bank’s technology development centre, stole $1 million in free cash by exploiting a loophole in the bank’s core operating system. In the Huaxia Bank, the withdrawals made in midnight were not recorded. After discovering the flaw way back in 2016, he inserted a few scripts into the system where he could make transactions without triggering an alert.

For nearly a year, made transactions of between 5000 and 20,000 yuan, until by 2018 where he amassed nearly seven million yuan without the knowledge of anyone. Most of the money stayed in the dummy account while a few were invested in stock market.

Even though his bank accept his explanation of testing the security of the bank and that the money was  simply resting on a dummy account he had created, the authorities did not buy it and have sentenced Qin for theft.

“Qin Qisheng said that the matter was complicated and involved lots of work … he believed the bank would not pay attention even if he reported it,” a bank representative told the trial. “We think this reason for not reporting is legitimate,” he added.

“The core business system of Hua Xia Bank was bought from overseas supplier, it was designed without considering the problem of night trading,” Qin said during his trial. “The customer generally would not report to the bank, [so] we were not informed about this situation. The problem was definitely there, the bank just couldn’t find the reason.”

Subscribe

Name(Required)
Privacy(Required)

Upcoming Events

Related articles

Who Do We Fire When the Agent Gets It Wrong? Inside the Agentic AI SOC

By Jeremy Hehl Agents can triage, enrich and correlate at machine speed. But someone still has to own the...

Cyber Insurance Is No Longer Optional: In the Age of AI-Driven Threats, Can Your Business Afford the Risk of Being Unprotected?

By Kareena Bavisi, Chief of Staff | EC-Council It comes down to one number: what your worst incident would...

Why AI Governance Is Becoming Cyber Insurance’s Next MFA

By Kareena Bavisi, Chief of Staff to CEO at EC-Council I set out to understand why companies still don’t...

What the Nuclear Treaty Got Right, and Why AI Still Can’t Use It

By Jay Bavisi, Founder & Group President, EC-Council Nuclear treaties stopped bombs. They don't stop a file you can...