Zeus Trojan steals $1M from online Brit bank accounts.

highland145

Lifer
Oct 12, 2009
43,551
5,960
136
Coming to a bank near you. Glad I don't bank online because sooner or later it will happen here.

Cyber criminals have raided the accounts of thousands of British internet bank customers in one of the most sophisticated attacks of its kind.
The fraudsters used a malicious computer programme that hides on home computers to steal confidential passwords and account details from at least 3,000 people.
The internet security experts M86, who uncovered the scam, estimate that at least £675,000 has been illegally transferred from the UK in the last month - and that the attacks are still continuing.
Last year 59.7 million Pounds was stolen in online banking fraud, while another 440 million was lost to credit card fraud.
 
Last edited:

kranky

Elite Member
Oct 9, 1999
21,014
137
106
It's going to take a monumental breakthrough in computer security to keep online banking alive. You have the most skilled programmers in the world working on hacking passwords and bank accounts, and all the rest of the programmers are spread out across all the financial institutions.

Now add in the end user factor and their lack of interest in protecting themselves, and the balance clearly tips towards increased profitability for hackers and trojan writers.
 

highland145

Lifer
Oct 12, 2009
43,551
5,960
136
Now add in the end user factor and their lack of interest in protecting themselves, and the balance clearly tips towards increased profitability for hackers and trojan writers.
That's for sure. Have a friend that is fairly sure she has a virus and STILL does online banking.
 

bignateyk

Lifer
Apr 22, 2002
11,288
7
0
I try to limit my risk by only doing my online banking from work, where the AV software and OS are updated constantly, and there is a pretty good firewall.

Not to mention I tend not to visit questionable websites at work. Although if someone manages to get a virus into anandtech ads I'm pretty much screwed.
 
Last edited:

InflatableBuddha

Diamond Member
Jul 5, 2007
7,445
1
0
'In the vast majority of cases, if people had kept their computer's operating systems and software such as Internet Explorer up to date they would not have been attacked,' he said.
'More often than not Trojans exploit known vulnerabilities that can be simply patched and fixed by downloading updates.'

Updated OS + Firewall + Avira A/V + Firefox w/NoScript.

I'm doing the best I can to protect myself.
 

Eli

Super Moderator | Elite Member
Oct 9, 1999
50,422
8
81
How does this work, anyway? With Wells Fargo, at least, you can't just go transferring money to other bank accounts willy nilly. I guess you can if the recipient account is also a Wells Fargo account....is that what they do? Then cash the account out, leaving the bank to take the loss? AFAIK, you're only liable for 50$ in the event of fraud.
 

highland145

Lifer
Oct 12, 2009
43,551
5,960
136
How does this work, anyway? With Wells Fargo, at least, you can't just go transferring money to other bank accounts willy nilly. I guess you can if the recipient account is also a Wells Fargo account....is that what they do? Then cash the account out, leaving the bank to take the loss? AFAIK, you're only liable for 50$ in the event of fraud.
With your Wells info, you can set up to pay a credit card from a different issuer, for example.

$50 for credit card fraud. If they clean out your checking and your bank wants to be a pain, you're out the $$.
 

Blackjack200

Lifer
May 28, 2007
15,995
1,685
126
Are these brute force attacks? I'm pretty sure my password is not cookied or anything like that (I have to type it in every time I log in) so I don't know where they'd get the password from. I guess the Trojan has a keylogger?
 

highland145

Lifer
Oct 12, 2009
43,551
5,960
136
Are these brute force attacks? I'm pretty sure my password is not cookied or anything like that (I have to type it in every time I log in) so I don't know where they'd get the password from. I guess the Trojan has a keylogger?
The Zeus v3 Trojan involved in the latest attacks hides in adverts that appear on legitimate websites.

Each time someone clicks on the advert, the code is downloaded to their home computer where it lies dormant.

The code only becomes active when the computer connects to a bank website when it starts to record account details, passwords and other confidential information.

It checks to see if the account holds enough cash and then transfers up to £5,000 to a ‘mule’ account - a legitimate bank account held by a real customer.

Owners of these mule accounts operate on the edge of the law and agree to transfer sums they receive to someone else, after taking a cut.


Sorry, couldn't un-bold it.
 

Eli

Super Moderator | Elite Member
Oct 9, 1999
50,422
8
81
Ah, yeah, it might be zero now. Last I remember seeing was $50.

So they essentially Bill Pay themselves? I see. That makes sense.

Yikes.
 

PokerGuy

Lifer
Jul 2, 2005
13,650
201
101
Interesting. There's a fairly obvious solution to this but the financial world seems to be really stubborn about adopting it: two factor security. Currently, banks and institutions require a password or something like that to authenticate. Once the bad guys know your password, they can do pretty much whatever they want.

If the banks used an RSA token or something like that, there would be no issue, since each time you log the code would be different and keyloggers etc would be useless. Viruses and such would not be able to do anything as far as logging into your accounts.

Banks and other companies just don't want to pay for the tokens and customers don't want to deal with the hassle, but it's about time the industry is forced down that road.
 

InflatableBuddha

Diamond Member
Jul 5, 2007
7,445
1
0
That's a bit relieving actually. Use AdBlockPlus to simply block the ads. Too bad many people don't know about that plugin, and then are actually dumb enough to click random ads anyway.
 

Blackjack200

Lifer
May 28, 2007
15,995
1,685
126
Each time someone clicks on the advert, the code is downloaded to their home computer where it lies dormant.

Oh, so it only steals money from retarded people... :awe:

Seriously though, it does seem pretty trivial for a Trojan to rip you off once it finds its way on your machine.
 

Blackjack200

Lifer
May 28, 2007
15,995
1,685
126
If the banks used an RSA token or something like that, there would be no issue, since each time you log the code would be different and keyloggers etc would be useless. Viruses and such would not be able to do anything as far as logging into your accounts.


I don't think banks can afford to provide RSA tolkens to all their account holders, it's already a very low margin business.
 

Russwinters

Senior member
Jul 31, 2009
409
0
0
I forsee RSA tokens becoming commonplace; even World of Warcraft had to move to RSA tokens because of the rampant hacking.

It's only a matter of time before online banking will have to as well, when hackers begin to get bold enough to do something highly illegal.
 

kranky

Elite Member
Oct 9, 1999
21,014
137
106
Perhaps banks will start closing accounts of people who had accounts compromised (not credit/debit cards, but actual online banking login info). I can see a time where customers get blacklisted from using online banking if they have caused a bank to suffer losses due to having their credentials compromised.

If that ever happens, banks will tell customers they have to pay for an RSA token and the customers will probably be happy to pay for it just to ensure continued access to online banking.
 

Eli

Super Moderator | Elite Member
Oct 9, 1999
50,422
8
81
I don't think banks can afford to provide RSA tolkens to all their account holders, it's already a very low margin business.

Banks are a low margin business?

bwhahahahahahahahahahahahahah

*breathes*

hahahhahahaha

I don't believe that for a second.
 
sale-70-410-exam    | Exam-200-125-pdf    | we-sale-70-410-exam    | hot-sale-70-410-exam    | Latest-exam-700-603-Dumps    | Dumps-98-363-exams-date    | Certs-200-125-date    | Dumps-300-075-exams-date    | hot-sale-book-C8010-726-book    | Hot-Sale-200-310-Exam    | Exam-Description-200-310-dumps?    | hot-sale-book-200-125-book    | Latest-Updated-300-209-Exam    | Dumps-210-260-exams-date    | Download-200-125-Exam-PDF    | Exam-Description-300-101-dumps    | Certs-300-101-date    | Hot-Sale-300-075-Exam    | Latest-exam-200-125-Dumps    | Exam-Description-200-125-dumps    | Latest-Updated-300-075-Exam    | hot-sale-book-210-260-book    | Dumps-200-901-exams-date    | Certs-200-901-date    | Latest-exam-1Z0-062-Dumps    | Hot-Sale-1Z0-062-Exam    | Certs-CSSLP-date    | 100%-Pass-70-383-Exams    | Latest-JN0-360-real-exam-questions    | 100%-Pass-4A0-100-Real-Exam-Questions    | Dumps-300-135-exams-date    | Passed-200-105-Tech-Exams    | Latest-Updated-200-310-Exam    | Download-300-070-Exam-PDF    | Hot-Sale-JN0-360-Exam    | 100%-Pass-JN0-360-Exams    | 100%-Pass-JN0-360-Real-Exam-Questions    | Dumps-JN0-360-exams-date    | Exam-Description-1Z0-876-dumps    | Latest-exam-1Z0-876-Dumps    | Dumps-HPE0-Y53-exams-date    | 2017-Latest-HPE0-Y53-Exam    | 100%-Pass-HPE0-Y53-Real-Exam-Questions    | Pass-4A0-100-Exam    | Latest-4A0-100-Questions    | Dumps-98-365-exams-date    | 2017-Latest-98-365-Exam    | 100%-Pass-VCS-254-Exams    | 2017-Latest-VCS-273-Exam    | Dumps-200-355-exams-date    | 2017-Latest-300-320-Exam    | Pass-300-101-Exam    | 100%-Pass-300-115-Exams    |
http://www.portvapes.co.uk/    | http://www.portvapes.co.uk/    |