Kathmandu. After serious security vulnerabilities were found in PHP programming technology used to operate websites and online systems around the world, it has also affected the banking sector in Nepal. To protect the system and customer details from possible cyber attacks, various banks and financial institutions, including Nepal Rastra Bank, have temporarily shut down some of their websites and web-based services.

Keeping in mind the risks seen in the technology, banks have taken measures to test the security of the system, improve technology, and control possible unauthorized access. Banks have shut down different services depending on the nature of the risk and the condition of their systems. Some have shut down the official website, while some have blocked certain online portals and digital services.

Earlier, the National Cyber ​​Security Center had also issued an emergency cyber security advisory in view of the security vulnerabilities seen in PHP technology. The center had directed government agencies, public service providers, and website operators to immediately test the security status of their systems and adopt necessary precautions.

According to the center, various runtime and web technology-based systems related to PHP are likely to be at risk. This includes technologies such as Apache, Mod_PHP, PHP-FPM, PHP-CGI, FrankenPHP and Lightspeed, as well as platforms such as WordPress and Drupal. If there are weaknesses in systems based on these technologies, their misuse can lead to unauthorized access and other cyber risks.

To mitigate the risks, the Center had directed to update the PHP version being used in the system, apply the necessary security patches and remove the vulnerabilities in the old versions. In cases where it is not possible to update immediately, it was also suggested to temporarily shut down the service by isolating the vulnerable system from the public internet.

Nepal Rastra Bank has also temporarily shut down its official website and other web-based services. The central bank has directed banks and financial institutions, payment system operators, payment service providers and remittance companies to strengthen the security of the system and increase regular security monitoring.

Following the instructions of the Rastra Bank and the advisory of the National Cyber ​​Security Center, banks have taken precautionary measures to ensure the security of their digital systems. Global IME Bank has temporarily shut down its Digital Universe service for system security and maintenance. Services related to ATM card replacement, online check clearing and cash deposit machines have been affected under this service. According to the bank, other banking services are operational.

Nabil Bank has temporarily shut down its Nbank microsite, GenAlpha app, online debit and credit card requests and fixed deposit loan services. Prime Commercial Bank has shut down its online account opening portal, online fixed deposit service, customer portal, online account freeze and balance certificate verification portal.

Similarly, NIC Asia Bank has temporarily shut down its official website and other web services as part of the risk assessment and system security process. Siddhartha Bank has also suspended its official website and online services operated from it. Machhapuchhre Bank has shut down its website and some web services to update its PHP-based system, while Nepal Investment Mega Bank has temporarily shut down its official website for security maintenance and system updates.

Thus, banks have shut down various services depending on the nature of the risk and technical conditions. Some banks have reported that core banking transactions and mobile banking are operational. However, not all bank services have been affected equally and it has not been confirmed that all the shut down services have been restored.