The Latest in IT Security

Luuuk is the name of a mysterious Trojan that was discovered in early 2014 after having allowed its creators to steal more than €500,000, or about $680,000, in just seven days by performing “Man-in-the Browser” attacks. Kaspersky found the threat on January 20th, and it affected 190 customers of an unnamed bank that operates in Italy and Turkey. The Luuuk Trojan managed to get online banking login credentials from victims using a malicious web injection, which allowed the program to steal usernames, passwords and OTP codes in real-time. Then, the malware would automatically check the existing balance and perform several malicious transactions “probably operating in the background of a legitimate banking session.” The money would then be transferred to mule accounts. According to