Mobile Version of Cridex Banking Trojan Spotted in the Wild

snoopy · Jun 10, 2013

Mobile Version of Cridex Banking Trojan Spotted in the Wild

Popular banking Trojans usually come with a mobile component that allows cybercriminals to bypass two factor authentication systems and gain access to their victims’ bank accounts.

Mobile components of ZeuS (ZitMo), SpyEye (SPitMo), Citadel (CitMo) and Carberp have been around for quite some time. Now, experts from RSA say they’ve also spotted an SMS forwarding app for the Cridex (Bugat) malware.

The latest version of Citadel is designed to hijack online banking sessions and trick victims into downloading and installing the mobile component, dubbed BitMo, on their Android, BlackBerry or Symbian devices. iOS devices are not vulnerable. During installation, the malware requests permission to access SMS messages. In the meantime, on the PC, a screen pops up asking the victim to enter a code from the mobile device. This way the infected PC is connected to the mobile device.

Experts say there’s nothing really novel about BitMo. It’s simply designed to conceal messages sent by the bank to the victim, disable audio alerts for these messages, and forward all important messages back to the cybercriminals. This way, when the crooks perform a fraudulent transaction, the confirmation messages and the one time password sent by the bank are forwarded directly to them. The victim remains completely unaware of what’s happening.
Click to expand...

Full story: http://news.softpedia.com/news/Mobi...nking-Trojan-Spotted-in-the-Wild-359951.shtml

Log in or Sign up

Mobile Version of Cridex Banking Trojan Spotted in the Wild

snoopy Registered Members

Share This Page

Log in or Sign up

Mobile Version of Cridex Banking Trojan Spotted in the Wild

snoopy Registered Members

Share This Page

Useful Searches