There’s a run of ZeuS (aka Zbot) trojans currently targeting several Finnish banks. And naturally, our Threat Research team has been working on related cases. Interestingly, they’ve discovered some new ZeuS functionality that hints of SpyEye.This version of ZeuS 2.x (Zbot.AVRC) has two new commands it will accept: user_activate_imodule and user_restart_imodule.SHA1: bf4fc1fb3bf98e1e783fb974f0b3ba622cd4b267When it receives the […]
Here’s how phishing methods are evolving based on our recent investigations. E-mail Phishing This message claims to be from Blizzard Entertainment. It attempts to phish the recipient by promising access to a game that’s currently under development. The language and grammar usage is good but not perfect. Somewhat oddly — the e-mail address that’s spoofed […]
Multiple man-in-the-middle attacks are currently underway against at least two Finnish banks: Nordea and Osuuspankki. Both banks use one time passwords and verification codes, so run of the mill phishing yields little of value to an attacker other than the account number. But in this case, the attacks are connected to a server-side man-in-the-middle attack […]
Latest Comments