Identity Theft News

Windows system restore targeted by virtual identity thieves

Thursday, September 24, 2009

The dogrobot virus that plagues Chinese internet cafes is being used to hijack online gaming account credentials, which can then be re-sold online.

The technique used to infect computers with the virus offers a unique advantage to cyber criminals: it infiltrates Windows' system restore functionality, so that computers remain infected even after complete reversion to a previously defined system restore point. This is accomplished via a combination of rootkits and zero-day flaws, which makes dogrobot difficult to clean from infected systems.

Experts say that the malware is a sophisticated delivery system for the dogrobot virus, which has been heavily modified to skirt security software and remain invisible on affected systems. This, in addition to its resistance to removal, makes the malware exceptionally suited to the theft of virtual identities for games like EverQuest and World of Warcraft.

Some online avatars can fetch hundreds of dollars at auction and sales websites, and an extensive market for virtual items and in-game money exists as well. Microsoft anti-virus researcher Chun Feng told ZDnet that the dogrobot group of viruses has cost Chinese internet cafes over $1.2 billion in losses.ADNFCR-1765-ID-19377068-ADNFCR

Related News:

Threat of identity theft shows need for online security - 11.19.2009
As Americans live increasingly large portions of their lives on the internet, the possibilities and incentives for remote identity theft increase as well. A report in the New York Times advises caution, and gives tips for constructing an "online bulwark" to prevent theft and fraud.

Wi-Fi network security vulnerable to man-in-the-middle attacks on smart phones - 11.16.2009
Researchers last week revealed a weakness in mobile network security that could allow for so-called "man-in-the-middle" techniques to steal personal information from users of certain types of mobile phones.

FDIC warns banks of money transfer 'mules' duped by cybercriminals - 11.2.2009
In a new warning to banks about illicit electronic fund transfers, the Federal Deposit Insurance Corporation (FDIC) said last week that online bank account theft is rising using "money mules," unwitting job-seekers who are duped by cyber crooks into wiring funds from hacked bank accounts.

Obama addresses cybersecurity awareness in YouTube video - 10.21.2009
Online cyber attacks and identity theft have never been higher, a threat environment that challenges U.S. security every day. President Obama has designated October as National Cybersecurity Awareness Month, which he addressed in a web video last week.

Facebook application security hole exposes millions to hacking, researcher says - 10.19.2009
A security researcher is warning Facebook users about potential vulnerabilities in Facebook applications that could allow cross-site scripting (XSS) hacker attacks for hijacking user accounts.

View Related Resources
Or
Watch an Online Demo
Or
Have us call you now