The State of Financial Trojans 2013

THE STATΕ OF FINANCIAL TROJANS 2013 December 2013 UK £1,50 US $2.60 EU € 2.00 The Price We "Financial Trojans Pay for Online Banking ophislicated han are at te emer epidemic levels" lln Traion Cderrisi the dirn hang irojan. Cyhererials In financiul reward are using ihe advancd tr implentations inllective at proteding the msdern haking Trajan. Cybereriminals In financial reward are unine thee adved This papetis an update for the year 2 and vight al he ot papular and suphisticat Tujans These financial Troja i specilically arget er THEa tim. Fatracting te e In the first three Zbot + Gameover financial fruud ingly urganiced ipradcontigura THREATS Cridex quarters of 2013 Shylock Spyeye Bebloh Mebroot Tilon 125K 2M 26K 33K 2K 9K 21K Number of COMPUTERS COMPROMISED What They Can Do? Redirect An attacker can redirect to a Web site of their choice. MITB Man-in-the-browser (a.k.a. webinjects) - an application hooking into the browser and manipulating data before it is displayed. Proxy Set up a proxy on the compromised computer. Back connect Screen shots Direct access to the compromised computer through RDP and VNC to an invisible second computer. Credit cards Records screen shots to circumvent virtual keyboards. Steals credit card number, name, expiry date and CVV. Certificates Steals and deletes certificates required for authentication and transactions. Notifier Video Records video to circumvent virtual keyboards. Alerts the attacker during user banking session. In Bitcoin We Trust 1000 US$ 1 BTC %3D As the value of Bitcoins increases, Bitcoin stealing Malware will increase Criminal interest in Bitcoins the last Tew years. Steali th line wallet. Sice it wallets ar a i luve becom a lat S कि "Value of Bitcoin shoots Besin online walista, There direed attacis ati Beintealie the attackers ueeslully stole ic through the roof!" A Global Scourge "A problem without borders, impacting millions worldwide" deritat yywin the l heri mtatyeaint CANADA 118K JAPAN UK 178K 206K. USA GERMANY 1M 135K INDIA 84K MEXICO 47K ITALY 71K AUSTRALIA BRAZIL WORLDWIDE INFECTIONS 88K 43K Symantec Security Response December 2013 Symantec. @threatintel| www.symantec.com