Malware That Drains Your Bank Account Thriving On Facebook

http://bits.blogs.nytimes.com/2013/06/03/malware-that-drains-your-bank-account-thriving-on-facebook/

by scapbi • 13 years ago

43 17 13 years ago

bits.blogs.nytimes.com

gbrindisi• 13 years ago

To everyone wondering why a 6yo trojan is still so used it is because Zeus source code was fully released/leaked and it's been used ever since to build new and improved variants like Ice IX, Gameover, Citadel, etc

freehunter• 13 years ago

Yeah, the article's assertion that whitehats are losing because criminals still use malware is kind of odd. The age of the malware doesn't matter if this version is only a couple months, weeks, or days old.

rfnslyr• 13 years ago

Where can I learn more about virus architecture/blackhat in general? Are there any defacto communities out there for this sort of thing? Just curious.

chm• 13 years ago

I would suspect communities concerned with illegal activities and state-of-the-art (0-day) code not to be easily accessible. There must be some on TOR.

wyck• 13 years ago

Hacking has existed since before the internet was invented. In general you want to do a lot of reading on TCP/IP, operating systems and programming languages. There are literally tons of whitepapers about security.

Blackhat communities are either very private or full of script kiddies.

You can follow subs like this to learn more http://www.reddit.com/r/netsec/

JohannE• 13 years ago

You could check out this very interesting upcoming course on coursera. https://www.coursera.org/course/malsoftware

paul9290• 13 years ago

Why haven't banks created two way verification system yet???

Let me approve or disapprove a charge or money transfer of a certain amount via a text message!!!

sjmulder• 13 years ago

I’ve been with a few different banks (ING, Rabobank, Bizner, HSBC) and they all use two step verification. Some send texts, others use a card reader or such.

dkl• 13 years ago

Ing in the US was bought by Capital One, and neither use key fobs (if that's what you meant). Are you in the EU?

peterwwillis2• 13 years ago

There's a trojan app for that.

redsparrow• 13 years ago

Indeed there is. There exists Android malware that infects your PC with a Zeus variant and then the two work in concert to intercept your SMS-based two-factor authentication.

jeffasinger• 13 years ago

I think a lot of banks just send a confirmation email.

That's actually fine, because due to the non instantaneous nature of today's banks, they can cancel the transactions for the next day or so.

zenith2037• 13 years ago

To become a whitehat. You have to know the trade in blackhat. Know your enemy. And that goes both ways in network security.

ttrreeww• 13 years ago

Zynga games?

orthecreedence• 13 years ago

They didn't really specify how this is being spread. If I have flashblock and a modern browser, I'm assuming it's pretty hard for a site to randomly install junk on my machine. Are people on Facebook downloading exe files or something?

DanBC• 13 years ago

People on Facebook are visiting links, posted on Facebook, to external sites.

Those external sites are the sites with the malware.

Very few people block anything; people don't bother blocking flash or javascript or even ads. (Adblock Plus, the most popular ad blocker, only has 15.5million users on Firefox.)

Malware That Drains Your Bank Account Thriving On Facebook

Related Stories