Alert for a ransomware that steals banking data



[ad_1]

July 14, 2018 – 14:47
It was discovered by a researcher from the computer security company Proofpoint, it was called Vega Stealer and it was detected in May through an email campaign.

A few weeks ago, a new ransomware (ie a virus that "hijacks" the victim's data) able to steal information from credit cards stored in the database. Chrome browsers has been discovered. and Firefox, two of the two most famous on the market

The new virus, discovered by researchers at the computer security company Proofpoint, called Vega Stealer and is a variant of the August Stealer that has been detected at the beginning of the month. Can go through an email campaign. In this document, hackers have used as an excuse an offer of employment for an ecommerce site or the return of a product purchased online.

In Argentina, Chrome holds 82% of the market, while Firefox follows with 5, 5%, according to data collected by StatsCounter earlier this year. Globally, Google's browser holds 58% market share, while Firefox appears with 5%, behind Safari (Apple) and UC Browser (a very popular browser in China).

How It Works

On May 8, Proofpoint received and blocked a low-volume email campaign with issues similar to "Required Online Store Developer" ( developer needed for an online store).

While some mailings were sent to individuals, others were circulated through distribution lists including "info @" and "clientservice @" and the like to reach more victims in two marketing areas and public relations, on the one hand; and retail and industry, on the other.

The mail had an attachment called "brief.doc" that contained a series of commands that downloaded the executable file with the virus. This executable has been installed in the "Music" directory under the name "ljoyoxu.pkzip".

These emails came from the same IP address as a virus that had been sent the previous day, May 7, and which became August Stealer. . The campaign was targeting the same target of users but the problems were different: they were aimed at returning a product online.

This virus could become a long-term threat, warned the computer scientists who analyzed it. "Although Vega Stealer is not the most complex malware that circulates today, it shows the flexibility of this type of threat," they explain. "As its delivery system is similar to that of other more prevalent and mature viruses, Vega has the potential to become a long-term threat."

Ways to Avoid It

All this type of viruses benefit from a practice known as social engineering that takes advantage, in simple terms , of a possible interest that it can generate. This is why campaigns that offer Netflix at $ 1 for a year and others tend to work, cases that we reviewed in Infotechnology.com.

Phishing cases multiply. It is important to know where to navigate, be attentive and think twice before entering sensitive data.

                           
                        

[ad_2]
Source link