“All-in-one”Zeus Trojan package for sale

Hi,

RSA, The Security Division of EMC, today released the highlights from its online fraud report for April 2008. Please see media alert below for more details

--

MEDIA ALERT

Media Alert: RSA AFCC detects “All-in-one”Zeus Trojan package for sale

Auckland, New Zealand, May 15, 2008 – RSA, The Security Division of EMC, today released highlights from its online fraud report for April 2008.

The RSA Anti-Fraud Command Centre (AFCC) reported on the continual spread of phishing in the APAC region highlighting that New Zealand and Australia have now appeared in the regional breakdown of attacked global banking brands for two consecutive months. The recent rise in attacks could be attributed to the growing number of Fast-Flux domains and phishing attacks reportedly hosted specifically in Tokelau, New Zealand. April was the first time that Tokelau appeared in the regional breakdown of attacked global banking brands.

Another contributing factor could be that fraudsters in the underground are now offering access to an “all-in-one” solution – a bullet-proof hosting server with a built-in Zeus Trojan administration panel and infection tools.

The AFCC has noted that fraudsters can now rent a service that provides them with a ready-made Zeus attack infrastructure. With all of the required stages in a single package, fraudsters now need only pay for the service, access the newly-hired Zeus Trojan server, create infection points and start collecting data. Those who have installed the Zeus administration panel on their servers are also offered advanced “exploit packages” that facilitate Zeus infections. The exploit package allows fraudsters to easily infect users and grow a Botnet of compromised machines. Thus, an entire Zeus attack comes alive, using a single service package that fraudsters can buy online.

# # #

About RSA

RSA, The Security Division of EMC, is the premier provider of security solutions for business acceleration, helping the world's leading organisations succeed by solving their most complex and sensitive security challenges. RSA's information-centric approach to security guards the integrity and confidentiality of information throughout its lifecycle - no matter where it moves, who accesses it or how it is used.

RSA offers industry-leading solutions in identity assurance & access control, encryption & key management, compliance & security information management and fraud protection. These solutions bring trust to millions of user identities, the transactions that they perform, and the data that is generated. For more information, please visit www.RSA.com and www.EMC.com.

About the Zeus Trojan

The Zeus Trojan is considered the latest step in the evolution of a family of financial crimeware that began with the notorious Limbo Trojan. Limbo, and its successor Zeus,

are designed to perform advanced key logging when infected users access specific web pages, including pages which are protected by SSL protocols. Zeus is also equipped with impressive self-protection mechanisms and encryption: Zeus’ entire communication is encrypted, and the information it collects is encrypted when it is sent to the drop point.

ENDS

© Scoop Media