Fighting malware and spam

Keyloggers used to loot US county

$415,000 sneaked from local government funds.

A Kentucky county has suffered losses of $415,000 after keylogging malware infiltrated its computer systems, allowing cybercriminals access to sensitive user data which let them syphon cash to accounts in the Ukraine.

Custom variants of the Zbot trojan were used to steal the passwords of the county treasurer, and accounts accessed via a tunnel to the infected system to minimise suspicion. Numerous small payments were made to non-existent county employees created by the crooks, who then used money mules ignorant of the scam to filter the money out of the US.

How the malware was inserted into the county's systems remains unclear, and some other aspects of the attack have also yet to be fully revealed, but a detailed report from Brain Krebs at the Washington Post is here, with further coverage in The Register here.

07 July 2009

Tags: cybercrime, identity theft, keylogger, mule, trojan.    del.icio.us   digg this

0 comments

Leave a comment

Quick Links

Poll

virusbtn: RT @emailsecmatters: The typical spam message has sources as diverse as the spam lunch meat: http://ht.ly/2yucd
1 hour ago

virusbtn: Can anyone write a rap about our RAP tests (http://bit.ly/255ySQ) and submit it to the Symantec competition http://bit.ly/bOJg8r
5 hours ago

Virus Bulletin

• VB100 – Windows Vista Business Edition Service Pack 2
• Apple pie order?
• Anti-unpacker tricks – part eleven
• Advanced exploit framework lab set-up
• HTML structure-based proactive phishing detection
• What’s the deal with sender authentication? Part 3