Who said that ICICI Net Banking is Best???
One of my friend told me that their direct debit facility which is used by hundreds of Websites like Indiatimes, Baazee and others has a serious security vulnerability which can screw up all their money transactions. He said that their net banking software is developed by Infosys, supposed to be a good company but this shows how good their products are. I Have seen utibank also use the same software. Infosys is actually developed that product as a universal banking solution and they customize it for their clients.
The ICICI net banking module is called infinity or something like that. I saw it on their site after my friend told me about it.
The ICICI Net Banking vulnerability was found by him and he has found out that which ever bank is using this product from Infosys is prone to this vulnerability.
Infact, I had seen the POC (Proof of Concept) and I could’nt believe it. I tried it with my account and went till the last step and then gave up since I know I shouldnt do that.
Please dont get in touch with me as I cannot reveal to you who he is but I can tell you that is will never misuse or disclose it to anyone. He just disclosed it to me since he knows that I am a responsible person. It just makes me feel how the big companies like Infosys develop universal solutions and hence screw up things when there is a vulnerability. I give zero points to their Quality/Testing Guys.
Regards,
Admin Strator