Kaspersky Lab researchers have detected NukeBot – new malware which has been designed to steal the credentials of online banking customers. Earlier versions of the Trojan were known to the security industry as TinyNuke, but lacked the features necessary to launch attacks. The latest versions however, are fully operable, and contain code to target the users of specific banks.

 

Although the appearance of a malware family in the wild is not unusual, the fact that criminals have a ready-to-attack version of the Trojan, means that soon they may initiate a wide-scale malicious campaign, to infect multiple users.

 

As an early warning to its customers and other users, Kaspersky Lab has published a brief analysis of the malware.

 

NukeBot is a banking Trojan. Upon infection it “injects” malicious code into the webpage of an online banking service displayed in a victim’s browser and then steals user data, spoofs their credentials, and more.

 

According to Kaspersky Lab researchers, there are already a number of compiled samples of this Trojan in the wild – shared on underground hacking forums. Most of these are rough, barely operational malware drafts; however, the company’s experts have managed to identify some that pose a real threat.

 

Around 5% of all samples found by Kaspersky Lab were NukeBot’s new ‘combat versions’, which have improved source codes and attacking capacities. Among other things these versions contain injections – specific pieces of code, which mimic parts of user interface of real online banking services.

 

Based on the analysis of injections, Kaspersky Lab experts believe the main targets of the new version of NukeBot are users of several French and US banks.

 

In addition, Kaspersky Lab researchers managed to detect several NukeBot modifications that didn’t have web injection functionality, and were designed to steal mail client and browser passwords.

 

This means that developers of new versions may aim to widen the functionality of this malware family.

 

“While criminals behind recent versions of this malware currently are not actively distributing NukeBot, this may, and likely will, change very soon. We’ve already seen this before with some other malware families: after a short testing period of a ready-to-attack malware, criminals start distributing it widely through infected websites, spam and phishing. So far we have seen NukeBot versions which are ready to attack the customers of at least six banks located in France and the US, however this list of targets looks like only the beginning. The goal of our brief research is to warn the banking community and online banking customers about a potentially emerging threat. We urge interested parties to use the results of our research in order to protect themselves from this threat in advance,” said Sergey Yunakovsky, security expert at Kaspersky Lab.

 

“In 2016, the number of users attacked with malware targeting financial data increased about 30.55% over the previous year, bringing it to close to 1.1 Million attacks. While most of these attacks were mostly towards regular users, approximately 17.7% of the attacks also targeted corporate users. From our Financial Cyberthreats report for 2016, we found that users in Russia, Germany, Japan, India, Vietnam and the US are the ones most often attacked by banking malware. The trends show us that although professional cybercriminal groups have indeed shifted a lot of their attention to targeted attacks against large companies, regular users and smaller firms are still being targeted,” added Sylvia Ng, General Manager at Kaspersky Lab Southeast Asia.

 

For financial organizations providing online banking services:

 

Make sure you have an effective fraud prevention solution in place, so that you can quickly and accurately spot unauthorized use of customer accounts and irregular financial activity.

 

For customers of online banking services:

 

Use an Internet security solution with tailored technologies to protect financial transactions, like Kaspersky Lab’s Safe Money.

 

Regularly run a system scan to check for possible infections.

 

Kaspersky Lab products detect the malware as Trojan-Banker.Win32.TinyNuke.

 

To learn more about the ‘combat versions’ of NukeBot, read the blog post, available on Securelist.com


RECOMMENDED ARTICLE FOR TECHWORLD


 
Chafer Cyberespionage Group Targets Embassies with Updated Homebrew Spyware
Techworld Date Posted: 7 February 2019 2:07 PM | 72 Views
Kaspersky Lab researchers have detected multiple attempts to infect foreign diplomatic entities in Iran with homebrew spyware. The attacks appear to be using an updated Remexi backdoor. Several legitimate tools were also used during.... See More
 
Chafer Cyberespionage Group Targets Embassies with Updated Homebrew Spyware
Techworld Date Posted: 2:07 PM | 72 Views
Kaspersky Lab researchers have detected multiple attempts to infect foreign diplomatic entities in Iran with homebrew spyware. The attacks appear to be using an updated Remexi backdoor. Several legitimate tools were also used during...See More

 
Kris Aquino, Bimby Give Three-Part Exclusive Tour of PLDT Home Fibr-Powered Home
Techworld Date Posted: 3 January 2018 2:26 PM | 586 Views
PLDT Home Ambassador and Queen of all Media Kris Aquino gave her viewers a treat this Christmas season through an exclusive corner-to-corner tour of her new, PLDT Home Fibr-powered home in Quezon City.. See More
 
Kris Aquino, Bimby Give Three-Part Exclusive Tour of PLDT Home Fibr-Powered Home
Techworld Date Posted: 2:26 PM | 586 Views
PLDT Home Ambassador and Queen of all Media Kris Aquino gave her viewers a treat this Christmas season through an exclusive corner-to-corner tour of her new, PLDT Home Fibr-powered home in Quezon City.See More

 
Fujitsu Develops AI Technology to Determine the Necessity of Cyberattack Responses
Techworld Date Posted: 13 February 2019 9:55 AM | 63 Views
Fujitsu Laboratories Ltd. has announced that it has developed an AI technology that automatically determines whether action needs to be taken in response to a cyberattack. . See More
 
Fujitsu Develops AI Technology to Determine the Necessity of Cyberattack Responses
Techworld Date Posted: 9:55 AM | 63 Views
Fujitsu Laboratories Ltd. has announced that it has developed an AI technology that automatically determines whether action needs to be taken in response to a cyberattack. See More

 
OYO Hotels Launches Operations in the Philippines; To Invest Upwards of $50 Million
Techworld Date Posted: 7 February 2019 8:59 AM | 105 Views
Technology and tourism, when converged effectively, open a myriad of opportunities. OYO, South Asia’s largest, and the world’s fastest-growing chain of hotels, homes and spaces, proves this as it lands in the Philippines.. See More
 
OYO Hotels Launches Operations in the Philippines; To Invest Upwards of $50 Million
Techworld Date Posted: 8:59 AM | 105 Views
Technology and tourism, when converged effectively, open a myriad of opportunities. OYO, South Asia’s largest, and the world’s fastest-growing chain of hotels, homes and spaces, proves this as it lands in the Philippines.See More

 
Fortinet Survey Reveals 48% of APAC IT Decision Makers Are Confident of Their Cybersecurity Postures despite 86% of Organizations Being Breached
Techworld Date Posted: 15 December 2017 9:25 AM | 46 Views
Fortinet® (NASDAQ: FTNT), the global leader in broad, integrated and automated cybersecurity solutions, today revealed additional findings from its Global Enterprise Security Survey. According to the research, 40 percent of IT decision makers (ITDMs). See More
 
Fortinet Survey Reveals 48% of APAC IT Decision Makers Are Confident of Their Cybersecurity Postures despite 86% of Organizations Being Breached
Techworld Date Posted: 9:25 AM | 46 Views
Fortinet® (NASDAQ: FTNT), the global leader in broad, integrated and automated cybersecurity solutions, today revealed additional findings from its Global Enterprise Security Survey. According to the research, 40 percent of IT decision makers (ITDMs)See More

 
Move Your SSD into the Fast Lane – CORSAIR Launches the Neutron NX500 NVMe PCIe SSD AIC
Techworld Date Posted: 11 August 2017 2:17 PM | 377 Views
  components, today announced the launch of the CORSAIR Neutron NX500 NVMe PCIe SSD AIC. The NX500 boasts performance up to five times faster than traditional SATA 3.0 SSDs, connecting to your system via.... See More
 
Move Your SSD into the Fast Lane – CORSAIR Launches the Neutron NX500 NVMe PCIe SSD AIC
Techworld Date Posted: 2:17 PM | 377 Views
  components, today announced the launch of the CORSAIR Neutron NX500 NVMe PCIe SSD AIC. The NX500 boasts performance up to five times faster than traditional SATA 3.0 SSDs, connecting to your system via...See More

 
Sing Your Way to Security: Unique, Memorable Passwords Made Stronger than Constant Change, Says Kaspersky Lab Researchers
Techworld Date Posted: 2 February 2019 10:14 AM | 62 Views
To mark Change Your Password Day, 2019, Kaspersky Lab’s security researchers are advising users that unique, memorable passwords are stronger and more effective than regularly changing account passwords when it comes to keeping data.... See More
 
Sing Your Way to Security: Unique, Memorable Passwords Made Stronger than Constant Change, Says Kaspersky Lab Researchers
Techworld Date Posted: 10:14 AM | 62 Views
To mark Change Your Password Day, 2019, Kaspersky Lab’s security researchers are advising users that unique, memorable passwords are stronger and more effective than regularly changing account passwords when it comes to keeping data...See More

 
Inclusive Work Philosophies in the Philippines Encourage Innovation 

Techworld Date Posted: 2 July 2019 9:41 AM | 77 Views
Inclusive Work Philosophies in the Philippines Encourage Innovation 
. See More
 
Inclusive Work Philosophies in the Philippines Encourage Innovation 

Techworld Date Posted: 9:41 AM | 77 Views
Inclusive Work Philosophies in the Philippines Encourage Innovation 
See More

 
Lenovo and Intel Kick Off Legion of Champions III 2019
Techworld Date Posted: 15 January 2019 10:52 AM | 58 Views
Lenovo, the world’s leading PC and smart device manufacturer, has announced the kick-off of its Legion of Champions Series III (LoC III) Grand Finals.. See More
 
Lenovo and Intel Kick Off Legion of Champions III 2019
Techworld Date Posted: 10:52 AM | 58 Views
Lenovo, the world’s leading PC and smart device manufacturer, has announced the kick-off of its Legion of Champions Series III (LoC III) Grand Finals.See More

 
Fortinet Predicts Highly Destructive and Self-Learning “Swarm” Cyber Attacks in 2018
Techworld Date Posted: 13 December 2017 4:02 PM | 314 Views
Fortinet® (NASDAQ: FTNT), the global leader in high-performance cybersecurity solutions, today unveiled predictions from the Fortinet FortiGuard Labs global research team about the threat landscape for 2018. The trends reveal the methods and strategies.... See More
 
Fortinet Predicts Highly Destructive and Self-Learning “Swarm” Cyber Attacks in 2018
Techworld Date Posted: 4:02 PM | 314 Views
Fortinet® (NASDAQ: FTNT), the global leader in high-performance cybersecurity solutions, today unveiled predictions from the Fortinet FortiGuard Labs global research team about the threat landscape for 2018. The trends reveal the methods and strategies...See More


Power by

Download Free AZ | Free Wordpress Themes