Commercial Bank of Ceylon, based in Colombo, Sri Lanka, has apparently been hacked, with its data posted online May 12. Bozkurtlar hacking group has also posted seven other data dumps from banks in the Middle East and Asia since April 26. The data dump contains 158,276 files in 22,901 folders and is about 6.97 GB uncompressed. Attackers appear to have compromised the bank’s systems using a. SQL injection attack and uploading a. web shell – a script that enables remote administration – onto a. bank’s PHP server. No customer data or payment card information was apparently exposed.”]
Source: https://www.cuinfosecurity.com/commercial-bank-ceylon-hacked-a-9103