In March 2013, the FBI began classified briefings for bank security executives about Operation Ababil, a recurring distributed-denial-of-service (DDoS) campaign that disrupted access to major U.S. financial websites. The briefings combined threat information with practical coordination: banks received attack indicators, compared defensive practices with government agencies, and prepared for further waves.
What the 2013 briefings covered
Dark Reading reported on May 14, 2013, that the FBI expedited one-day security clearances so bank executives and security officers could receive classified information. FBI executive assistant director Richard McFeely said videoconference sessions addressed who officials believed was behind the attacks. The report described recurring attacks against major U.S. banks in which customers sometimes could not reach online or mobile banking.
The attackers publicly claimed responsibility and described a motive, but the Dark Reading account also noted that U.S. officials characterized the campaign differently. Those competing descriptions should not be treated as a settled attribution solely on the basis of that report.
How the attacks worked, according to later official accounts
In testimony to the Senate Banking Committee on December 10, 2014, FBI Cyber Division Assistant Director Joseph M. Demarest said that actors began launching powerful attacks in September 2012. A botnet combined bandwidth from numerous web servers and directed the resulting traffic at major U.S. banking institutions.
#1 Best Overall
- Firewall Protection: Remote Access Authentication, Content Filtering, Malware Protection, URL Filtering, Web Content Filtering, Deep Inspection Firewall, Reassembly-free Deep Packet Inspection, and
- Firewall Protection (continued): Gateway Antivirus, Anti-spyware, Denial of Service (DoS), Distributed Denial of Service (DDoS), Egress Filtering, Cookies Blocking, Dead Peer Detection
- Encryption Standard: DES, 3DES, AES (142-bit), AES (128-bit), AES (256-bit), SHA-1, MD5 Intrusion Prevention, NAT, PAT, IPSec NAT Traversal, 5 Network (RJ-45) Ports, Fast Ethernet, 10/100Base-TX
- Virtualization: 8000 x Maximum UTM/DPI Connections, 8000 x Maximum Connections, 1000 x New Connections/Sec, 1 x SonicPoints Supported, 5 x Site-to-Site VPN Tunnels, 5 x VLANS
- USB Port, AC Adapter (Power Source) 12 V DC, Management Port, 32 MB Flash Memory, 256 MB Standard Memory, Secure Digital (SD) Card , Height: 1.4", Width: 7.5", Depth: 5.6
On March 24, 2016, the U.S. Department of Justice announced charges against seven Iranian nationals. The announcement described prosecutors’ allegations that a coordinated campaign targeted 46 companies, primarily in the U.S. financial sector, from late 2011 through mid-2013. It said the attacks became nearly weekly after September 2012, overwhelmed victim servers with botnet-generated traffic, and blocked customers from websites and accounts.
Those details came from an indictment and remained allegations when announced. The DOJ explicitly stated that charges are accusations and that defendants are presumed innocent unless and until proven guilty. The same announcement said the campaign disrupted service but did not steal customer account data.
Rank #2
- Comprehensive Hardware and Service Package: Includes FortiGate-120G appliance with 1 year of FortiCare Premium and FortiGuard Unified Threat Protection (UTP).
- Unified Threat Protection (UTP) Bundle: Protects against sophisticated web and DNS-based threats with advanced filtering and security features including ATP, DNS filtering, URL filtering, video filtering, and anti-botnet services.
- Enhanced Web Security: Offers high-level web security suitable for varied enterprise environments needing strong protective measures against online threats.
- Extended Support and Service: FortiCare Premium provides dependable technical support ensuring seamless operation and efficient issue resolution.
- Optimal for Diverse Deployment: Ideal for organizations with complex network environments looking for comprehensive security solutions.
Scale and impact reported by officials
| Measure | What the source reported | Attribution and period |
|---|---|---|
| Peak attack volume | As much as 140 gigabits per second on some days | DOJ description of indictment allegations, announced March 24, 2016 |
| Customer impact | Hundreds of thousands of customers reportedly cut off from online account access | DOJ description of indictment allegations, announced March 24, 2016 |
| Companies targeted | 46 major companies, primarily in the U.S. financial sector | DOJ description of indictment allegations |
| Classified briefings | Approximately 36 | FBI testimony covering March 2013 through July 2014 |
| Attendance at initial briefing | More than 300 chief information security officers | FBI testimony: March 19, 2013, via secure video from 33 FBI field offices |
| Alert messages | 34 FBI Liaison Alert System messages; about 20 concerned financial-sector threats | FBI testimony covering April 2013 through July 2014 |
| Compromised-system indicators | Indicators for approximately 115,000 systems | FBI testimony describing indicators distributed in those messages |
These figures measure different things, come from different documents, and cover different periods. They should not be combined into a single attack count or presented as current threat statistics.
How government and banks coordinated
Classified threat briefings
Demarest testified that the FBI provided approximately 36 classified threat briefings from March 2013 to July 2014 to private-sector financial institutions and agencies including the Department of Homeland Security, Department of the Treasury, the FDIC, and the Federal Reserve System.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Rank #3
- No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
- Coverage: Plan starts on the date of purchase. Malfunctions covered after the manufacturer's warranty. Power surges covered from day one. Plan includes food loss reimbursement up to $250 per approved claim for refrigerators & freezers and laundry services reimbursement up to $25 per approved claim for washers & dryers that are out for service for more than seven (7) consecutive days.
- Easy Claims Process: File a claim anytime online or by phone. Most claims approved within minutes. If we can’t repair it, we’ll send you an Amazon e-gift card for the purchase price of your covered product or replace it.
- Product Eligibility: Plan must be purchased with a product or within 30 days of the product purchase. Pre-existing conditions are not covered.
- Terms & Details: More information about this protection plan is available within the “Product guides and documents” section. Simply click “User Guide” for more info. Terms & Conditions will be available in Your Orders on Amazon. Asurion will also email your plan confirmation with Terms & Conditions to the address associated with your Amazon account within 24 hours of purchase.
Indicator sharing
The FBI worked with DHS to distribute Joint Indicator Bulletins containing thousands of IP addresses associated with systems that participated in the attacks. Banks used those indicators to improve mitigation during later incidents. The alerts gave defenders technical data they could feed into monitoring and blocking controls rather than relying only on general warnings.
Cross-sector discussion
Briefings involving the FBI, DHS, and Treasury also gave bank security personnel a forum to exchange defensive practices and threat context. The model was therefore two-way: agencies shared intelligence, while financial institutions contributed operational experience from live attacks.
Rank #4
- No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
- Coverage: Plan starts on the date of purchase. Malfunctions covered after the manufacturer's warranty. Power surges covered from day one. Plan includes food loss reimbursement up to $250 per approved claim for refrigerators & freezers and laundry services reimbursement up to $25 per approved claim for washers & dryers that are out for service for more than seven (7) consecutive days.
- Easy Claims Process: File a claim anytime online or by phone. Most claims approved within minutes. If we can’t repair it, we’ll send you an Amazon e-gift card for the purchase price of your covered product or replace it.
- Product Eligibility: Plan must be purchased with a product or within 30 days of the product purchase. Pre-existing conditions are not covered.
- Terms & Details: More information about this protection plan is available within the “Product guides and documents” section. Simply click “User Guide” for more info. Terms & Conditions will be available in Your Orders on Amazon. Asurion will also email your plan confirmation with Terms & Conditions to the address associated with your Amazon account within 24 hours of purchase.
What the episode says about DDoS readiness
The Office of the Comptroller of the Currency’s Bulletin 2014-14, dated April 3, 2014, summarized a joint FFIEC statement on continuing DDoS risk. It said financial institutions should address DDoS readiness in their ongoing information-security and incident-response plans.
- Monitor public-facing traffic: watch incoming traffic to public websites so abnormal volume or patterns can be identified quickly.
- Activate the incident plan: move into the institution’s incident-response process when an attack is suspected, with defined escalation and communications responsibilities.
- Staff for the duration: maintain enough personnel to sustain response operations through a prolonged event.
- Include contracted support: account for previously contracted third-party services where appropriate, rather than assuming internal teams alone can absorb the attack.
- Coordinate outsourced IT: community banks should ensure their IT units or service providers take appropriate action.
Bulletin 2014-14 is dated guidance from 2014, not a complete statement of current regulatory requirements. Institutions should verify today’s applicable rules and supervisory expectations independently.
Best Value
- No Additional Cost: You pay nothing for repairs – parts, labor, and shipping included.
- Coverage: Plan starts on the date of purchase. Malfunctions covered after the manufacturer's warranty. Power surges covered from day one. Plan includes food loss reimbursement up to $250 per approved claim for refrigerators & freezers and laundry services reimbursement up to $25 per approved claim for washers & dryers that are out for service for more than seven (7) consecutive days.
- Easy Claims Process: File a claim anytime online or by phone. Most claims approved within minutes. If we can’t repair it, we’ll send you an Amazon e-gift card for the purchase price of your covered product or replace it.
- Product Eligibility: Plan must be purchased with a product or within 30 days of the product purchase. Pre-existing conditions are not covered.
- Terms & Details: More information about this protection plan is available within the “Product guides and documents” section. Simply click “User Guide” for more info. Terms & Conditions will be available in Your Orders on Amazon. Asurion will also email your plan confirmation with Terms & Conditions to the address associated with your Amazon account within 24 hours of purchase.
Why the FBI briefing mattered
A DDoS campaign can make a bank’s website or mobile service unavailable without breaking into customer accounts. The immediate business problem is availability: customers cannot log in, view balances, or initiate ordinary online transactions. The response described by the FBI addressed that problem at the level it occurs—traffic visibility, rapid indicators, sustained staffing, coordinated communications, and access to specialized third-party capacity.
James B. Comey, then FBI director, said in the DOJ’s March 24, 2016 announcement: “The FBI will find those behind cyber intrusions and hold them accountable — wherever they are, and whoever they are.” That statement reflects the agency’s enforcement position; it does not convert the indictment’s campaign narrative into a court finding.
Quick Recap
Key takeaways
- The headline refers to classified FBI briefings for bank defenders about Operation Ababil, beginning in 2013.
- The FBI’s 2014 testimony describes an interagency response built around briefings, shared indicators, and peer exchange with financial institutions.
- The most useful defensive lesson is operational readiness: monitor traffic, trigger the response plan quickly, staff for a sustained attack, and know when contracted mitigation support is needed.
- The DOJ’s 2016 account describes severe disruption and no theft of account data, but its specific campaign details were allegations in an indictment.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
