Kaspersky Lab researchers have detected NukeBot – new malware which has been designed to steal the credentials of online banking customers. Earlier versions of the Trojan were known to the security industry as TinyNuke, but lacked the features necessary to launch attacks. The latest versions however, are fully operable, and contain code to target the users of specific banks.

 

Although the appearance of a malware family in the wild is not unusual, the fact that criminals have a ready-to-attack version of the Trojan, means that soon they may initiate a wide-scale malicious campaign, to infect multiple users.

 

As an early warning to its customers and other users, Kaspersky Lab has published a brief analysis of the malware.

 

NukeBot is a banking Trojan. Upon infection it “injects” malicious code into the webpage of an online banking service displayed in a victim’s browser and then steals user data, spoofs their credentials, and more.

 

According to Kaspersky Lab researchers, there are already a number of compiled samples of this Trojan in the wild – shared on underground hacking forums. Most of these are rough, barely operational malware drafts; however, the company’s experts have managed to identify some that pose a real threat.

 

Around 5% of all samples found by Kaspersky Lab were NukeBot’s new ‘combat versions’, which have improved source codes and attacking capacities. Among other things these versions contain injections – specific pieces of code, which mimic parts of user interface of real online banking services.

 

Based on the analysis of injections, Kaspersky Lab experts believe the main targets of the new version of NukeBot are users of several French and US banks.

 

In addition, Kaspersky Lab researchers managed to detect several NukeBot modifications that didn’t have web injection functionality, and were designed to steal mail client and browser passwords.

 

This means that developers of new versions may aim to widen the functionality of this malware family.

 

“While criminals behind recent versions of this malware currently are not actively distributing NukeBot, this may, and likely will, change very soon. We’ve already seen this before with some other malware families: after a short testing period of a ready-to-attack malware, criminals start distributing it widely through infected websites, spam and phishing. So far we have seen NukeBot versions which are ready to attack the customers of at least six banks located in France and the US, however this list of targets looks like only the beginning. The goal of our brief research is to warn the banking community and online banking customers about a potentially emerging threat. We urge interested parties to use the results of our research in order to protect themselves from this threat in advance,” said Sergey Yunakovsky, security expert at Kaspersky Lab.

 

“In 2016, the number of users attacked with malware targeting financial data increased about 30.55% over the previous year, bringing it to close to 1.1 Million attacks. While most of these attacks were mostly towards regular users, approximately 17.7% of the attacks also targeted corporate users. From our Financial Cyberthreats report for 2016, we found that users in Russia, Germany, Japan, India, Vietnam and the US are the ones most often attacked by banking malware. The trends show us that although professional cybercriminal groups have indeed shifted a lot of their attention to targeted attacks against large companies, regular users and smaller firms are still being targeted,” added Sylvia Ng, General Manager at Kaspersky Lab Southeast Asia.

 

For financial organizations providing online banking services:

 

Make sure you have an effective fraud prevention solution in place, so that you can quickly and accurately spot unauthorized use of customer accounts and irregular financial activity.

 

For customers of online banking services:

 

Use an Internet security solution with tailored technologies to protect financial transactions, like Kaspersky Lab’s Safe Money.

 

Regularly run a system scan to check for possible infections.

 

Kaspersky Lab products detect the malware as Trojan-Banker.Win32.TinyNuke.

 

To learn more about the ‘combat versions’ of NukeBot, read the blog post, available on Securelist.com


RECOMMENDED ARTICLE FOR TECHWORLD


 
Asia and Middle East a Hotbed of New Threat Actors in Q1, 2018
Techworld Date Posted: 16 April 2018 4:28 PM | 434 Views
During the first three months of the year, Kaspersky Lab researchers discovered a wave of new APT activity based mainly in Asia – more than 30% of Q1 reports were dedicated to threat operations.... See More
 
Asia and Middle East a Hotbed of New Threat Actors in Q1, 2018
Techworld Date Posted: 4:28 PM | 434 Views
During the first three months of the year, Kaspersky Lab researchers discovered a wave of new APT activity based mainly in Asia – more than 30% of Q1 reports were dedicated to threat operations...See More

 
AKAMAI POSITIONED IN LEADERS QUADRANT OF GARTNER MAGIC QUADRANT FOR WEB APPLICATION FIREWALLS
Techworld Date Posted: 24 August 2017 10:38 AM | 194 Views
Akamai Technologies, Inc. (NASDAQ: AKAM), the world's largest and most trusted cloud delivery platform, today announced it has been acknowledged by Gartner, Inc. in the "Leaders" quadrant of the "Magic Quadrant for Web Application.... See More
 
AKAMAI POSITIONED IN LEADERS QUADRANT OF GARTNER MAGIC QUADRANT FOR WEB APPLICATION FIREWALLS
Techworld Date Posted: 10:38 AM | 194 Views
Akamai Technologies, Inc. (NASDAQ: AKAM), the world's largest and most trusted cloud delivery platform, today announced it has been acknowledged by Gartner, Inc. in the "Leaders" quadrant of the "Magic Quadrant for Web Application...See More

 
Epson Philippines Celebrates 20 Years of Leading the Show
Techworld Date Posted: 26 September 2018 3:48 PM | 115 Views
Epson Philippines Corporation (EPC) celebrated its 20th year anniversary at the Grand Ballroom of the Grand Hyatt Hotel in BGC, Taguig City. . See More
 
Epson Philippines Celebrates 20 Years of Leading the Show
Techworld Date Posted: 3:48 PM | 115 Views
Epson Philippines Corporation (EPC) celebrated its 20th year anniversary at the Grand Ballroom of the Grand Hyatt Hotel in BGC, Taguig City. See More

 
Transcend Releases Lightning-fast PCIe Solid-state Drive for Mac Computers
Techworld Date Posted: 29 August 2017 3:50 PM | 220 Views
Transcend Information Inc., a leading manufacturer of storage and multimedia products, is proud to announce the release of the JetDrive 820 PCI Express (PCIe) Gen 3.0 solid-state drive (SSD) for Mac computers. The JetDrive.... See More
 
Transcend Releases Lightning-fast PCIe Solid-state Drive for Mac Computers
Techworld Date Posted: 3:50 PM | 220 Views
Transcend Information Inc., a leading manufacturer of storage and multimedia products, is proud to announce the release of the JetDrive 820 PCI Express (PCIe) Gen 3.0 solid-state drive (SSD) for Mac computers. The JetDrive...See More

 
ADATA P10050C Power Bank Wins Golden Pin Design Award 2018
Techworld Date Posted: 20 October 2018 9:16 AM | 81 Views
ADATA Technology, a leading manufacturer of high-performance DRAM modules and NAND Flash products, is proud to announce that its P10050C power bank has won the Golden Pin Design Award 2018. This win for the.... See More
 
ADATA P10050C Power Bank Wins Golden Pin Design Award 2018
Techworld Date Posted: 9:16 AM | 81 Views
ADATA Technology, a leading manufacturer of high-performance DRAM modules and NAND Flash products, is proud to announce that its P10050C power bank has won the Golden Pin Design Award 2018. This win for the...See More

 
MSI Philippines Joins the World of Consumer Electronics Expo (WOCEE)
Techworld Date Posted: 20 September 2017 9:20 AM | 226 Views
Manila, Philippines - Micro-Star International (MSI Gaming) will be participating in the World Consumer Electronics Expo organized by WorldBex this September 21 to 24, 2017 at World Trade Center, Pasay City. 11am to 6pm,.... See More
 
MSI Philippines Joins the World of Consumer Electronics Expo (WOCEE)
Techworld Date Posted: 9:20 AM | 226 Views
Manila, Philippines - Micro-Star International (MSI Gaming) will be participating in the World Consumer Electronics Expo organized by WorldBex this September 21 to 24, 2017 at World Trade Center, Pasay City. 11am to 6pm,...See More

Rafael Aquino
The Threadripper’s Simple Complexity
Techworld • By: Rafael Aquino | Date Posted: 29 July 2017 4:30 PM | 768 Views
The AMD Ryzen Threadripper is by far the most powerful processor to date. 12 cores and 24 threads each, that is absolutely dwarfing any other processor ever created in the history of mankind. But.... See More
Rafael Aquino
The Threadripper’s Simple Complexity
Techworld • By: Rafael Aquino | Date Posted: 4:30 PM | 768 Views
The AMD Ryzen Threadripper is by far the most powerful processor to date. 12 cores and 24 threads each, that is absolutely dwarfing any other processor ever created in the history of mankind. But...See More

 
Symantec a Leader in Gartner Magic Quadrant for Secure Web Gateways for the 11th Consecutive Time
Techworld Date Posted: 28 December 2018 4:17 PM | 61 Views
Symantec Corp. (NASDAQ: SYMC), the world’s leading cyber security company, today announced that it has been named by Gartner, Inc. as a Leader in the 2018 Magic Quadrant for Secure Web Gateways. . See More
 
Symantec a Leader in Gartner Magic Quadrant for Secure Web Gateways for the 11th Consecutive Time
Techworld Date Posted: 4:17 PM | 61 Views
Symantec Corp. (NASDAQ: SYMC), the world’s leading cyber security company, today announced that it has been named by Gartner, Inc. as a Leader in the 2018 Magic Quadrant for Secure Web Gateways. See More

 
Group Behind VenusLocker Switches from Ransomware to Monero Mining
Techworld Date Posted: 11 January 2018 10:36 AM | 238 Views
There is no doubt that cryptocurrency has been on a steady rise. According to a research paper by the University of Cambridge, . See More
 
Group Behind VenusLocker Switches from Ransomware to Monero Mining
Techworld Date Posted: 10:36 AM | 238 Views
There is no doubt that cryptocurrency has been on a steady rise. According to a research paper by the University of Cambridge, See More

 
Kaspersky Lab Deploys Industrial CyberSecurity Solutions, Leverages on iTrust Test Bed
Techworld Date Posted: 22 January 2018 3:13 PM | 211 Views
Kaspersky Lab recently announced the deployment of Kaspersky’s Industrial CyberSecurity (KICS) solutions at the Secure Water Treatment (SWaT) test bed of iTrust, a centre for cyber security research of the Singapore University of Technology.... See More
 
Kaspersky Lab Deploys Industrial CyberSecurity Solutions, Leverages on iTrust Test Bed
Techworld Date Posted: 3:13 PM | 211 Views
Kaspersky Lab recently announced the deployment of Kaspersky’s Industrial CyberSecurity (KICS) solutions at the Secure Water Treatment (SWaT) test bed of iTrust, a centre for cyber security research of the Singapore University of Technology...See More


Power by

Download Free AZ | Free Wordpress Themes