Secure Bank Ltd., a mid-sized financial institution, prides itself on offering secure digital banking services to its customers. Recently, the bank…
CA Final · Advanced Auditing, Assurance and Professional Ethics · PYQS · May 2025
Secure Bank Ltd., a mid-sized financial institution, prides itself on offering secure digital banking services to its customers. Recently, the bank became a target of a sophisticated malware attack that exposed multiple vulnerabilities in its IT systems. (I) Incident 1: An employee of Secure Bank received an email from what appeared to be a reputable software vendor, offering a "free system optimization tool". Believing it to be legitimate, the employee downloaded and installed the tool. However, it was a cyber-attack, disguised to appear as harmless software. Once installed, it created a backdoor that allowed attackers to access the bank's internal network. (II) Incident 2: The attackers leveraged to target employees' smartphones. This malware was introduced through phishing SMS (smishing), which prompted employees to click on malicious links. The malware exploited outdated operating systems on the devices to extract sensitive corporate information. (III) Incident 3: The attackers executed a malware on the bank's systems by exploiting legitimate tools such as PowerShell and Windows Management Instrumentation (WMI), the attackers initiated a series of commands to explore and manipulate the bank's network. (IV) Incident 4: A critical server was encrypted by a cyber-attack, disrupting operations for three days. This encrypted all critical financial data, rendering the system inoperable. Investigations revealed that the attack originated from a phishing email sent to an employee. The email contained a link that exploited an unpatched vulnerability in the server. From the above which of the cyber-attack incident that Secure Bank Ltd. became victim of, is described as "Ransomware?"
Suggested Answer and Working Notes:
Correct Answer: Option (A)
(A) Incident 4
Topics: Special Features of Audit of Banks & Non-Banking Financial Companies
Related Questions in this Topic
- The Arogya Bank Ltd. was having 130 branches all over India by the year ending 31 st March, 2026. 10 branches of the ba...
- During the year 2026-27, the management of following three NBFCs approached their statutory auditor for advice regarding...
- XYZ Investments Pvt. Ltd. is a company incorporated under the Companies Act, 2013, engaged solely in acquiring and holdi...
- A bank proposes to shift certain Government securities from the "Available for Sale” (AFS) category to the "Held to Matu...
- During the statutory audit of Fair Bank, you are examining the Cash Credit account of M/s Bright Traders as at 31st Marc...