Web Security News

New banking Trojan steals money and covers its tracks

Thursday, October 1, 2009

URLzone, a Trojan detected earlier this month infecting a swath of computers in Germany, may be one of the gravest threats to online bank data security yet, according to experts.

The highly sophisticated malicious program infects computers in the usual way: email attachments, malicious Javascript, and Adobe PDF vulnerabilities. URLzone, which only affects Windows computers, exploits a browser security hole in Firefox, Opera, and the last three versions of Internet Explorer.

URLzone, once installed on a target machine, becomes active when the user logs on to a bank website and hijacks the web browser in use, transferring money out of the victim's account without his or her notice.

What makes URLzone particularly pernicious, experts say, is the lengths to which it goes to avoid detection. The Trojan carefully calculates the amount of money stolen from a given account so as to avoid tripping anti-fraud alerts. It even falsifies the transaction information displayed to the victim, so that the theft will appear not to have happened unless the account is accessed from a computer uninfected by URLzone.ADNFCR-1765-ID-19388724-ADNFCR

Related News:

Network security concerns prompt postponement of Google phones in China - 1.20.2010
The Wall Street Journal reports that Google has decided to indefinitely postpone the launch of two of its Android smartphones to the Chinese market, which pundits have taken as further proof of the growing rift between the search giant and the Chinese government.

Cloud network security concerns prompt Microsoft to propose new laws - 1.20.2010
Microsoft's general counsel, Brad Smith, told an audience at the Brookings Institution today that the government should step in to regulate the emerging cloud computing industry and help protect businesses and consumers from fraud and abuse.

Network security experts unmask command servers behind Google attack - 1.19.2010
Researchers at VeriSign's iDefense lab have published a report claiming that the Chinese government was responsible for the recent large-scale cyber attacks that targeted Google and other U.S. companies.

Out-of-band IE patch to fix widespread vulnerability - 1.19.2010
Microsoft will issue a patch to its Internet Explorer browser software before its next scheduled update, intended to fix the flaw that enabled hackers to launch a damaging cyber attack on numerous U.S. companies.

France and Germany warn citizens to avoid using Internet Explorer - 1.18.2010
The governments of both France and Germany have issued official warnings to their citizenry, saying that, until Microsoft releases a patch for the widely-used Internet Explorer web browser, it is a threat to network security and should not be used.
View Related Resources
Or
Watch an Online Demo
Or
Have us call you now