Virus can attack ‘any bank anywhere’

November 29, 2013 – 7:10 AM

Kaspersky Lab has recorded several thousand attempts to infect computers used for online banking with a malicious programme that its creators claim can attack “any bank in any country”.

The Neverquest Trojan banker supports just about every possible trick used to bypass online banking security systems: web injection, remote system access, social engineering, and so on. In light of the Trojan’s self-replication capabilities, a sharp rise in the number of attacks involving Neverquest can be expected, resulting in financial losses for users all over the world.

The weeks prior to the Christmas and New Year holidays are traditionally a period of high malicious user activity. As early as November there have been instances where posts were made in hacker forums about buying and selling databases to access bank accounts and other documents used to open and manage the accounts to which stolen funds are sent.

Neverquest appeared on the market even earlier – an advert looking for a partner to work with the Trojan on the servers of a group of cybercriminals, with their support, was posted in July of this year.

Sergey Golovanov, Principal Security Researcher, Kaspersky Lab, commented: “After wrapping up several criminal cases associated with the creation and proliferation of malware used to steal bank website data, a few ‘holes’ appeared on the black market. New malicious users are trying to fill these with new technologies and ideas.

Source:
http://www.iol.co.za/scitech/technology/security/virus-can-attack-any-bank-anywhere-1.1613989