Kaspersky Lab researchers have detected NukeBot – new malware which has been designed to steal the credentials of online banking customers. Earlier versions of the Trojan were known to the security industry as TinyNuke, but lacked the features necessary to launch attacks. The latest versions however, are fully operable, and contain code to target the users of specific banks.

 

Although the appearance of a malware family in the wild is not unusual, the fact that criminals have a ready-to-attack version of the Trojan, means that soon they may initiate a wide-scale malicious campaign, to infect multiple users.

 

As an early warning to its customers and other users, Kaspersky Lab has published a brief analysis of the malware.

 

NukeBot is a banking Trojan. Upon infection it “injects” malicious code into the webpage of an online banking service displayed in a victim’s browser and then steals user data, spoofs their credentials, and more.

 

According to Kaspersky Lab researchers, there are already a number of compiled samples of this Trojan in the wild – shared on underground hacking forums. Most of these are rough, barely operational malware drafts; however, the company’s experts have managed to identify some that pose a real threat.

 

Around 5% of all samples found by Kaspersky Lab were NukeBot’s new ‘combat versions’, which have improved source codes and attacking capacities. Among other things these versions contain injections – specific pieces of code, which mimic parts of user interface of real online banking services.

 

Based on the analysis of injections, Kaspersky Lab experts believe the main targets of the new version of NukeBot are users of several French and US banks.

 

In addition, Kaspersky Lab researchers managed to detect several NukeBot modifications that didn’t have web injection functionality, and were designed to steal mail client and browser passwords.

 

This means that developers of new versions may aim to widen the functionality of this malware family.

 

“While criminals behind recent versions of this malware currently are not actively distributing NukeBot, this may, and likely will, change very soon. We’ve already seen this before with some other malware families: after a short testing period of a ready-to-attack malware, criminals start distributing it widely through infected websites, spam and phishing. So far we have seen NukeBot versions which are ready to attack the customers of at least six banks located in France and the US, however this list of targets looks like only the beginning. The goal of our brief research is to warn the banking community and online banking customers about a potentially emerging threat. We urge interested parties to use the results of our research in order to protect themselves from this threat in advance,” said Sergey Yunakovsky, security expert at Kaspersky Lab.

 

“In 2016, the number of users attacked with malware targeting financial data increased about 30.55% over the previous year, bringing it to close to 1.1 Million attacks. While most of these attacks were mostly towards regular users, approximately 17.7% of the attacks also targeted corporate users. From our Financial Cyberthreats report for 2016, we found that users in Russia, Germany, Japan, India, Vietnam and the US are the ones most often attacked by banking malware. The trends show us that although professional cybercriminal groups have indeed shifted a lot of their attention to targeted attacks against large companies, regular users and smaller firms are still being targeted,” added Sylvia Ng, General Manager at Kaspersky Lab Southeast Asia.

 

For financial organizations providing online banking services:

 

Make sure you have an effective fraud prevention solution in place, so that you can quickly and accurately spot unauthorized use of customer accounts and irregular financial activity.

 

For customers of online banking services:

 

Use an Internet security solution with tailored technologies to protect financial transactions, like Kaspersky Lab’s Safe Money.

 

Regularly run a system scan to check for possible infections.

 

Kaspersky Lab products detect the malware as Trojan-Banker.Win32.TinyNuke.

 

To learn more about the ‘combat versions’ of NukeBot, read the blog post, available on Securelist.com


RECOMMENDED ARTICLE FOR TECHWORLD


 
New Game Ready Driver Is Optimised for Star Wars Battlefront II, And Improves Destiny 2 Performance by up to 53%
Techworld Date Posted: 16 November 2017 5:26 PM | 376 Views
Hot on the heels of the Star Wars inspired GPUs comes the Star Wars TM BattlefrontTM II Game Ready driver from NVIDIA. Star Wars Battlefront II is launching worldwide on November 17, 2017, but.... See More
 
New Game Ready Driver Is Optimised for Star Wars Battlefront II, And Improves Destiny 2 Performance by up to 53%
Techworld Date Posted: 5:26 PM | 376 Views
Hot on the heels of the Star Wars inspired GPUs comes the Star Wars TM BattlefrontTM II Game Ready driver from NVIDIA. Star Wars Battlefront II is launching worldwide on November 17, 2017, but...See More

 
ADATA Launches New Range of Charging Products
Techworld Date Posted: 4 July 2018 11:07 AM | 378 Views
ADATA Technology, a leading manufacturer of high-performance DRAM modules and NAND Flash products, today launched a series of new charging products that make powering mobile lifestyles easier than ever.. See More
 
ADATA Launches New Range of Charging Products
Techworld Date Posted: 11:07 AM | 378 Views
ADATA Technology, a leading manufacturer of high-performance DRAM modules and NAND Flash products, today launched a series of new charging products that make powering mobile lifestyles easier than ever.See More

 
Enjoy Up to 30 Percent Discount on Booking.com Accommodations with PLDT and Smart
Techworld Date Posted: 15 September 2018 2:13 PM | 291 Views
In line with their thrust to give customers epic and incredible experiences, leading telco and digital services provider PLDT, Inc. and its mobile services arm Smart Communications, Inc. have teamed up with Booking.com to.... See More
 
Enjoy Up to 30 Percent Discount on Booking.com Accommodations with PLDT and Smart
Techworld Date Posted: 2:13 PM | 291 Views
In line with their thrust to give customers epic and incredible experiences, leading telco and digital services provider PLDT, Inc. and its mobile services arm Smart Communications, Inc. have teamed up with Booking.com to...See More

 
Stand-Out Customized Labels Make the Difference
Techworld Date Posted: 29 July 2019 10:00 AM | 98 Views
Stand-Out Customized Labels Make the Difference. See More
 
Stand-Out Customized Labels Make the Difference
Techworld Date Posted: 10:00 AM | 98 Views
Stand-Out Customized Labels Make the DifferenceSee More

 
Riding on Strong Sales Momentum, Lenovo Bolsters Lineup with New Products
Techworld Date Posted: 2 July 2019 9:12 AM | 55 Views
Riding on Strong Sales Momentum, Lenovo Bolsters Lineup with New Products. See More
 
Riding on Strong Sales Momentum, Lenovo Bolsters Lineup with New Products
Techworld Date Posted: 9:12 AM | 55 Views
Riding on Strong Sales Momentum, Lenovo Bolsters Lineup with New ProductsSee More

 
Kingston Enhances Award-Winning IronKey D300 Encrypted USB
Techworld Date Posted: 19 November 2018 3:15 PM | 249 Views
Kingston Technology, a world leader in memory products and technology solutions, has added new features to its recent Cyber Defense 2018 Global Awards winning IronKey™ D300 encrypted USB flash drive to improve device management.... See More
 
Kingston Enhances Award-Winning IronKey D300 Encrypted USB
Techworld Date Posted: 3:15 PM | 249 Views
Kingston Technology, a world leader in memory products and technology solutions, has added new features to its recent Cyber Defense 2018 Global Awards winning IronKey™ D300 encrypted USB flash drive to improve device management...See More

 
F5 Delivers Application Services for a Multi-Cloud World
Techworld Date Posted: 12 July 2017 2:12 PM | 13 Views
MANILA, PHILIPPINES – F5 Networks (NASDAQ: FFIV) announces the availability of offerings designed to provide consistent application services in multi-cloud environments—giving companies greater deployment flexibility, more effective security, and faster time to market.. See More
 
F5 Delivers Application Services for a Multi-Cloud World
Techworld Date Posted: 2:12 PM | 13 Views
MANILA, PHILIPPINES – F5 Networks (NASDAQ: FFIV) announces the availability of offerings designed to provide consistent application services in multi-cloud environments—giving companies greater deployment flexibility, more effective security, and faster time to market.See More

 
Sowbug: Cyber Espionage Group Targets South American and Southeast Asian Governments
Techworld Date Posted: 10 November 2017 11:03 AM | 416 Views
Symantec has identified a previously unknown group called Sowbug that has been conducting highly targeted cyber attacks against organizations in South America and Southeast . See More
 
Sowbug: Cyber Espionage Group Targets South American and Southeast Asian Governments
Techworld Date Posted: 11:03 AM | 416 Views
Symantec has identified a previously unknown group called Sowbug that has been conducting highly targeted cyber attacks against organizations in South America and Southeast See More

 
PLDT, Smart Unlock Amazing Digital Experiences Powered by PH’s Fastest Network
Techworld Date Posted: 7 November 2018 3:57 PM | 21 Views
Fresh from their latest recognition as the Philippine’s fastest fixed and mobile networks, leading digital services provider PLDT Inc. and its mobile arm Smart Communications are ushering in a new wave of innovative products.... See More
 
PLDT, Smart Unlock Amazing Digital Experiences Powered by PH’s Fastest Network
Techworld Date Posted: 3:57 PM | 21 Views
Fresh from their latest recognition as the Philippine’s fastest fixed and mobile networks, leading digital services provider PLDT Inc. and its mobile arm Smart Communications are ushering in a new wave of innovative products...See More

 
Sony’s Xperia XZ Premium Now Available in Limited Edition Rosso Colorway
Techworld Date Posted: 10 November 2017 10:48 AM | 433 Views
Sony announced that the Xperia XZ Premium is already available in a new, limited edition colorway.. See More
 
Sony’s Xperia XZ Premium Now Available in Limited Edition Rosso Colorway
Techworld Date Posted: 10:48 AM | 433 Views
Sony announced that the Xperia XZ Premium is already available in a new, limited edition colorway.See More


Power by

Download Free AZ | Free Wordpress Themes