Monday, November 3, 2008

Sinowal Trojan: Stealing financial information for 2 years +

In the recent past, there has been a lowering of the apparent threat level of Trojans, it almost seems like people have taken them for granted. Well, here is news that should make you reconsider, should remind you that if you are unprotected, then there are many dangers out there that could affect your financial status:


RSA FraudAction Research Lab has discovered log-in information for about 300,000 online bank accounts and 250,000 credit and debit card accounts that have been gathered by a cybercrime gang over the past three years using the Sinowal Trojan. "This may be one of the most pervasive and advanced pieces of crimeware ever created by fraudsters," according to a blog entry posted Friday from RSA, EMC's security unit. The Sinowal Trojan infects computers without the owner knowing it by surrepticiously planting itself onto the computer while the owner is Web surfing in an attack dubbed a "drive-by download."
The Trojan is programmed to execute when the victim visits a particular banking or financial Web site; it is triggered by more than 2,700 specific URLs, according to RSA. The malware then inserts additional fields into the victim's browser prompting the victim to type in information such as PIN and Social Security number, which the Web site itself does not ask for.


This was truly a dangerous Trojan. Imagine being undetected for so many years, especially when the trade of user financial information is now manipulated by criminal gangs. With greater internet usage, the transfer of money is now much quicker and money can vanish from one place to another in no time at all. Further, there are a large number of people who would fall prey to such attacks and have their financial information revealed.

No comments: