Chinese security head pulls a practical joke and steals from his own bank

Date:

Share post:

This may seem like a scene straight out of a heist movie, but a Chinese programmer did something as spectacular. Qin Qisheng, a former manager in Huaxia Bank’s technology development centre, stole $1 million in free cash by exploiting a loophole in the bank’s core operating system. In the Huaxia Bank, the withdrawals made in midnight were not recorded. After discovering the flaw way back in 2016, he inserted a few scripts into the system where he could make transactions without triggering an alert.

For nearly a year, made transactions of between 5000 and 20,000 yuan, until by 2018 where he amassed nearly seven million yuan without the knowledge of anyone. Most of the money stayed in the dummy account while a few were invested in stock market.

Even though his bank accept his explanation of testing the security of the bank and that the money was  simply resting on a dummy account he had created, the authorities did not buy it and have sentenced Qin for theft.

“Qin Qisheng said that the matter was complicated and involved lots of work … he believed the bank would not pay attention even if he reported it,” a bank representative told the trial. “We think this reason for not reporting is legitimate,” he added.

“The core business system of Hua Xia Bank was bought from overseas supplier, it was designed without considering the problem of night trading,” Qin said during his trial. “The customer generally would not report to the bank, [so] we were not informed about this situation. The problem was definitely there, the bank just couldn’t find the reason.”

Subscribe

Name(Required)
Privacy(Required)

Upcoming Events

Related articles

Cyber Insurance May Be Optional, But Knowing What You Can Afford to Lose Isn’t

By Kareena Bavisi It comes down to one number: what your worst incident would cost, and how much of...

Why AI Governance Is Becoming Cyber Insurance’s Next MFA

By Kareena Bavisi I set out to understand why companies still don’t think they’re adequately covered. What I found...

What the Nuclear Treaty Got Right, and Why AI Still Can’t Use It

By Jay Bavisi, Founder & Group President, EC-Council Nuclear treaties stopped bombs. They don't stop a file you can...

EC-Council Releases ADG 2.0 and Offers Its AI Governance Crosswalks Free to Every Government, Regulator, and Standards Body as Nations Split on AI Rules

With autonomous AI agents already reaching into government systems and no global treaty in sight, EC-Council will assist...