Gordon Campbell | Parliament TV | Parliament Today | News Video | Crime | Employers | Housing | Immigration | Legal | Local Govt. | Maori | Welfare | Unions | Youth | Search

 


Mobile banking goldmine for cybercriminals


Mobile banking goldmine for cybercriminals

AUCKLAND and AMSTERDAM – 9 November 2012 – Consumers who use their smartphones to access online banking services are among the latest targets for cybercriminals, according to the AVG Technologies Q3 Community Powered Threat Report released today.

AVG predicted growing sophistication in mobile malware earlier in 2012 and the Q3 threat report affirms that suspicion, with mobile cybercrime being the biggest trend of the third quarter. Malware known as Zitmo (or Zeus in the Mobile), a new version of well know malware Zeus-on-PC has recently been spotted, targeting the 1 billion smart phone users globally. AVG has been tracking its evolution and has identified how hackers are exploiting the growth in mobile banking by releasing Zitmo for mobile platforms, notably Android, in very controlled attacks.

A 2012 PriceWaterhouseCoopers’ report <http://press.pwc.com/GLOBAL/digital-banking-to-be-the-norm-by-2015-/s/9d93ee5e-8fce-492a-82a7-368f0d23311c> projected that digital banking would become the norm globally by 2015. Zitmo exploits the two-factor authentication process many banks have put in place to protect their customers including the traditional user/password authentication and a Transaction Authentication Number (TAN), which is sent as a text message to the user’s mobile device. Zitmo intercepts this communication and stores the details to gain access to user bank accounts.

“Zitmo is not new malware as such; but the new ways in which we are seeing cybercriminals use it underlines this worrying trend of socially engineering security attacks to match evolving consumer habits,” said Michael McKinnon, Security Advisor at AVG Technologies AU. “We always recommend consumers exercise care when sourcing and downloading apps onto their smartphones, as unofficial third party sites are usually the best places for cybercriminals to seed malware-ridden versions of popular apps. People get caught out because they cannot tell if they have the malware on their phone, so it’s best to install mobile security software and keep it updated in order to have peace of mind when using mobile banking and social networking services.”

Consumers using social networks are increasingly at risk as cybercriminals can now buy ready-made malware on subscription. Social networkers were hit this quarter by an explosion of attacks using the notorious Blackhole Exploit kit, the first ‘commercial’ malware. The attack left users unable to log-on to their accounts or access any games or applications as cybercriminals coordinated the attacks from multiple external advertising servers, which generated an exceptional increase from 250,000 attacks to over 1.6m recorded events within an eight hour period.

To download the full Q3 2012 Community Powered Threat Report, please visit: http://www.avg.co.nz/files/media/avg_threat_report_2012-q3.pdf <http://www.avg.co.nz/files/media/avg_threat_report_2012-q3.pdf>

Keep up to date with our regular threat bulletins on the AVG News & Threats <http://blogs.avg.com/news-threats/> blog.

About the report

The AVG Community Protection Network is an online neighbourhood watch, where community members work to protect each other. Information about the latest threats is collected from customers who participate in the product improvement program and shared with the community to make sure everyone receives the best possible protection.

The AVG Community Powered Threat Report is based on the Community Protection Network traffic and data collected from participating AVG users over a three-month period, followed by analysis by AVG. It provides an overview of web, mobile devices, spam risks and threats. All statistics referenced are obtained from the AVG Community Protection Network.

AVG has focused on building communities that help millions of online participants support each other on computer security issues and actively contribute to AVG’s research efforts.
###
About AVG — www.avg.co.nz <http://www.avg.co.nz/?utm_source=avgt>
AVG Technologies’ mission is to simplify, optimise and secure the Internet experience, providing peace of mind to a connected world. AVG’s powerful yet easy-to-use software and online services put users in control of their Internet experience. By choosing AVG’s software and services, users become part of a trusted global community that benefits from inherent network effects, mutual protection and support. AVG has grown its user base to 128 million active users as of June 30, 2012 and offers a product portfolio that targets the consumer and small business markets and includes Internet security, PC performance optimisation, online backup, mobile security and identity protection.

© Scoop Media

 
 
 
 
 
Parliament Headlines | Politics Headlines | Regional Headlines

AMA: Scoop's 'Invisible Paywall'

Operation Chrysalis: The Final Countdown - Thanks & There's Still Time To Pledge

Phew! We are now counting down the hours to the end of this crowd-funding campaign at 11pm on Sunday. Thankyou to all those Scoop readers and supporters who have pledged already. You have been awesome. But this is not over yet. More>>

 
 

PARLIAMENT TODAY:

IPCA Reports: Significant Problems In Police Custody

In releasing two reports today, the Independent Police Conduct Authority has highlighted a number of significant problems with the way in which Police deal with people who are detained in Police cells. More>>

ALSO:

Inspector-General of Intelligence and Security: Inquiry Into GCSB Pacific Allegations

The complaints follow recent public allegations about GCSB activities. The complaints, and these public allegations, raise wider questions regarding the collection, retention and sharing of communications data. More>>

ALSO:

TPPA Investment Leak: "NZ Surrender To US" On Corporates Suing Governments

Professor Jane Kelsey: ‘As anticipated, the deal gives foreign investors from the TPPA countries special rights, and the power to sue the government in private offshore tribunals for massive damages if new laws, or even court decisions, significantly affected their bottom line’. More>>

ALSO:

Werewolf: The Myth Of Steven Joyce

Gordon Campbell: The myth of competence that’s been woven around Steven Joyce – the Key government’s “Minister of Everything” and “Mr Fixit” – has been disseminated from high-rises to hamlets, across the country... More>>

ALSO:

RMTU: No Public Submissions On International Government Procurement Deal

“The government is preparing to assent to the Government Procurement Agreement, a World Trade Organisation Treaty which opens up New Zealand Government contracts to foreign companies and closes the door on local businesses and their workers. However the Foreign Affairs, Defence and Trade Select Committee is refusing to take public submissions on the decision.” More>>

ALSO:

Gordon Campbell:
On Pacific Spying

So New Zealand spied on its friends and allies in the Pacific – and has not only been passing on the results to the NSA, but has apparently passed on the details of the Pacific’s relations with Taiwan to our other best friends, the Chinese. On the side, the Key government has also been using the security services to gauge the chances of Trade Minister Tim Groser landing the top job at the WTO... More>>

ALSO:

State Housing Transfer: Salvation Army Opts Out

The Salvation Army has decided against negotiating with Government for the transfer of Housing New Zealand stock.
More>>

ALSO:

Get More From Scoop

 

LATEST HEADLINES

 
 
 
 
 
 
 
 
Politics
Search Scoop  
 
 
Powered by Vodafone
NZ independent news