ZeuS Botnet Updating Infected Systems with Rootkit-Equipped Trojan

ZeuS, or Zbot is one of the oldest families of financial malware, it is a Trojan horse capable to carry out various malicious and criminal tasks and is often used to steal banking information. It is distributed to a wide audience, primarily through infected web pages, spam campaigns and drive-by...

iBanking Android Malware targeting Facebook Users with Web Injection techniques

iBanking is nothing but a mobile banking Trojan app which impersonates itself as a so-called 'Security App' for Android devices and distributed through HTML injection attacks on banking sites, in order to deceive its victims. Recently, its source code has been leaked online through an underground...

IBiz EBanking Integrator WriteOFXDataFile Method Arbitrary File Overwrite - Ver2 (CVE-2008-1725)

A file overwrite vulnerability has been reported in Nsoftware Ibiz E-banking Integrator. An attacker could exploit this vulnerability via a full pathname in the argument. Successful exploitation of this vulnerability would allow a remote attacker to overwrite arbitrary files on the vulnerable...

New Zeus Variant Comes Complete With a Signed Certificate

Yet another variant of the Zeus banking Trojan has surfaced; this one comes disguised as an Internet Explorer document and uses an authentic digital certificate to download a rootkit onto infected machines. According to researchers at the SSL firm Comodo, more than 200 examples of the Trojan have...

Beware of Zeus Banking Trojan Signed With Valid Digital Signature

A new dangerous variant of ZeuS Banking Trojan has been identified by Comodo AV labs which is signed by stolen Digital Certificate which belongs to Microsoft Developer to avoid detection from Web browsers and anti-virus systems. Every Windows PC in the world is set to accept software "signed" wit...

New Zorenium Bot Boasts Ability to Run on iOS

UPDATE–The iOS platform has been remarkably resistant to malware infections over the years and attackers interested in mobile devices mainly have focused their efforts on Android. But the developer of a little-known bot that has the ability to run on Linux and Windows machines now has a version...

Threat Outbreak Alert: Fake Internet Banking Security Upgrade Notice Email Messages on March 18, 2014

Medium Alert ID: 33398 First Published: 2014 March 18 19:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain a new security program for the recipient. The text in the email message attempts to convince th...

IE Zero Day Exploits Increase Just Before Patch

Attackers have increased their exploitation of an Internet Explorer zero day vulnerability CVE-2014-0322 set to be fixed by Microsoft in its regularly scheduled patch Tuesday release later this afternoon. According to a Websense report, the exploit source code deployed in at least two incidents –...

Tor Network used to Host 900 Botnets and hidden Darknet Markets

Tor network offers users browse the Internet anonymously and is mostly used by activists, journalists to conceal their online activities from prying eyes. But it also has the Dark side, as Tor is also a Deep Web friendly tool that allows hackers and cyber criminals to carry out illicit activities...

Threat Outbreak Alert: Email Messages with Malicious Attachment on March 6, 2014

Medium Alert ID: 33230 First Published: 2014 March 6 19:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment relating to banking fraud for the recipient. The email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Bank Account Information Email Messages on February 27, 2014

Medium Alert ID: 33113 First Published: 2014 February 28 20:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain banking information for the recipient. The text in the email message attempts to convince the recipient to op...

Tilon/SpyEye2 Banking Trojan Usage Declining after SpyEye Author Arrest

Today, when we come across various malware, exploit kits and botnets that are in the wild, we think about an effective Antivirus solution or a Security Patch, but the most effective solution is always "The arrest of malware authors and culprits who are involved in the development of Malware." Til...

Threat Outbreak Alert: Fake Banking Information Notification Email Messages on February 26, 2014

Medium Alert ID: 33060 First Published: 2014 February 26 19:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain banking information from the Bank of Italy for the recipient. The text in the email message...

Caphaw Banking Malware Distributed via YouTube Ads

More than one billion of unique visitor spend about 6 billion hours on YouTube to watch videos, according to monthly YouTube Stats. Security researchers from Bromium Labs recently found that YouTube advertising network has been abused by rogue advertisers to distribute malware. YouTube In-Stream...

Threat Outbreak Alert: Fake Bank Deposit Confirmation Email Messages on February 17, 2014

Medium Alert ID: 32883 First Published: 2014 February 17 14:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation for the recipient. The text in the email message attempts to convince the recipient to...

Hackers exploiting Router vulnerabilities to hack Bank accounts through DNS Hijacking

In past months, we have reported about critical vulnerabilities in many wireless Routers including Netgear, Linksys, TP-LINK, Cisco, ASUS, TENDA and more vendors, installed by millions of home users worldwide. Polish Computer Emergency Response Team CERT Polska recently noticed a large scale cybe...

Bredo Banking Malware Campaign Targets Bank of America Customers

The Major US Financial institution, Bank of America is being targeted by a stealthy malicious financial malware campaign, according to AppRiver report. Last month the researchers at AppRiver has noticed enormous volumes of traffic through their data centers, with the peaks of traffic reaching thr...

Asseco SEE iBank FX Client 2.0.93 Privilege Escalation

Asseco SEE iBank FX Client = 2.0.9.3 Local Privilege Escalation Vulnerability Vendor: Asseco SEE Product web page: http://www.asseco.com Affected version: 2.0.9.3 Build 22.06.2011 - Desktop/Enterprise Edition 1.2 1.1.5.1270 Service Pack 5 - Desktop Edition 1.1.5.1247 1.0 Application download...

Mobile Malware Captures Keystrokes and Screengrabs

New proof-of-concept mobile malware logs keystrokes and captures screen-grabs on jailbroken iOS and Android devices in order to steal online log-in credentials and other sensitive information from targeted devices. In an interview with Threatpost, Trustwave senior security consultant Neal Hindoch...

SpyEye creator pleads guilty in U.S Federal Court

Aleksandr Andreevich Panin, one of the alleged masterminds behind the notorious SpyEye banking trojan, pleaded guilty in an Atlanta courtroom yesterday to conspiracy charges relating to the development and distribution of the the malware. Panin pleaded guilty to conspiring to commit wire and bank...