Cybercrooks breed SELF-CLONING MUTANT that STEALS your BANK DETAILS

Fresh Cridex variant plays merry hell via email


Cybercrooks have put together a botnet client which bundles in worm-like functionality that gives it the potential to spread quickly.

Seculert warns that the latest version of the Cridex (AKA Geodo) information stealing Trojan includes a self-spreading infection method.

Infected PCs in the botnet download a secondary strain of malware – an email worm – from the botnet's command and control servers. That worm pushes out an email with links to download a zip file containing the primary Cridex Trojan.

Seculert discovered that the the email worm is provided with approximately 50,000 stolen SMTP account credentials, including the related SMTP servers. The bot then uses these credentials to target mostly German marks by sending spoofed emails posing as messages from German banks and financial organisations.

"The emails we have seen, written in German, contain a link prompting the recipient to download a zip file which contains an executable disguised as a PDF document," Seculert explains in a blog post. "By opening the file, Geodo [new version of Cridex] is installed on the newly infected endpoint, adding a new bot to the mix.

The Cridex banking Trojan has been around for at least two years. Previous spreading tactics have involved compromising legitimate website before using the infamous Blackhole Exploit Kit to push the Trojan onto the vulnerable Windows PCs of visiting surfers. ®


Tech Resources

Three reasons you need a hybrid multicloud

Businesses need their IT teams to operate applications and data in a hybrid environment spanning on-premises private and public clouds. But this poses many challenges, such as managing complex networking, re-architecting applications for the cloud, and managing multiple infrastructure silos. There is a pressing need for a single platform that addresses these challenges - a hybrid multicloud built for the digital innovation era. Just this Regcast to find out: Why hybrid multicloud is the ideal path to accelerate cloud migration.

3 Unexpected SAP Cloud Challenges and How to Conquer Them

In this white paper you'll discover the three main challenges plaguing both Enterprise IT operations and Managed Service Providers (MSPs) today, and learn how to overcome them.

Manage Office 365 licences better

Low costly is poor Office 365 license management? We all suspect that we either have too many licenses, or those Office 365 licenses are being underused. Either way, it’s the same problem: we’re wasting money. IT spending will go under the microscope in 2020, and this is a great place to look. So look on the bright side: over-purchasing and underuse are problems that you can fix, starting today. Find out how in this Regcast.

The Ransomware Hunt that Unearthed a Historic Banking Trojan

The Sophos Managed Threat Response (MTR) team provides customers with swift, human-led responses to the nastiest threats and most sophisticated adversaries.

Biting the hand that feeds IT © 1998–2020