Hackers debut malware loaded USB ruse
Litter bait used as phishing lure
Agentless Backup is Not a Myth
Malware purveyors deliberately left USB sticks loaded with a Trojan in a London car park in a bid to trick users into getting infected.
The attack was designed to propagate Trojan banking software that swiped users' login credentials from compromised machines.
Check Point regional director Nick Lowe mentioned the ruse during a presentation at the Infosec trade show on Tuesday, but declined to go into further details, citing the need for confidentiality to protect an investigation he's involved in.
Mikko Hypponen, chief research officer of security firm F-Secure, said separately that Trojan code was replacing phishing emails as the preferred method for fraudsters to rip off users' account details.
Banking Trojans are written for profit and sold through Russian language websites and elsewhere for between $2,000 and $5,000. Two of the main groups of Trojan malware authors - Corpse and SE-Code - are based in Russia and "market" the Haxdoor and Apophis strains of banking Trojans. An unknown Russian speaking virus writer group is behind Torpig, another banking Trojan family. Malicious code variants of the Bancos Trojan are sold by an unnamed group in Brazil. ®
COMMENTS
One word : autorun
I looked into this myself a while ago in order to better secure systems - you must at least disable autorun to be secure on a Windows box. Although most USB sticks won't autorun, this is just due to a hardware bit setting. Just grab one of the Microsoft USB sticks from a tradeshow or the U3 ones you can buy and they are set to autorun - you then just have to set up a normal CD autorun and put it on the stick. Easy!
I imagine there is a way to get it to autorun on Macs too - anyone comment? Just like those CD's that some magazines used to have that would run on Windows or Macs.
Of course, you could just put a tempting exe on the stick anyway like "HR Salary Records.exe" and that would probably do it anyway. Just have it throw up a failure due to lack of some special software, meanwhile installing the trojan in the background.
I want a free one
I want a free USB Stick! Where can I find one of these.
Seriously now I'd just load it into my G5 & erase it.
Who'd be stupid enough to run anything off a found USB stick?
I mean Id look for good naughty pics or something.
John
reminds me of this from last year
http://www.darkreading.com/document.asp?doc_id=95556&WT.svl=column1_1
IT infrastructure monitoring strategies
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
Data control in the cloud
Cloud based data management
Agentless Backup is Not a Myth
