Feeds

Malware gang steal over £700K from one British bank

Cybercrooks scoop cash from thousands of accounts

Beginner's guide to SSL certificates

A banking Trojan attack has led to the fraudulent withdrawal of more than $1m from online banking accounts maintained with a UK bank since the start of July, according to security researchers.

Web-based malware based on the infamous Zeus cybercrime toolkit is being used to steal money via the unnamed bank's online banking system. Researchers at the M86's Security Labs came across the attack after discovering the botnet's command & control centre, which is hosted in Moldova.

Victims were infected by a Zeus banking Trojan variant while browsing the net. The Trojan swiped the customer's online banking ID and hijacked their online banking sessions, reportedly only targeting victims who had substantial balances.

"It [the malware] checks the account balance and, if the account balance is bigger than £800 value, it issues a money transfer transaction," M86 reports.

Most such attacks include the use of phishing middlemen to obtain funds from compromised accounts and transfer them by untraceable wire transfer to the Eastern European masterminds behind the scam.

From 5 July, the cyber criminals have successfully stolen £675,000 ($1,077,000) and the attack is "still progressing", according to M86.

Early explanations of the attack leave a number of questions unanswered, such as the name of the bank targeted, the apparent use of a technique that dispenses with the use of phishing middlemen, and what steps have been taken to shut down the attack.

We've scheduled an interview with the US-based M86 researchers who discovered the attack for later on Tuesday, and will update this story when we hear more. ®

Remote control for virtualized desktops

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Designing and building an open ITOA architecture
Learn about a new IT data taxonomy defined by the four data sources of IT visibility: wire, machine, agent, and synthetic data sets.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.