Large Zeus Botnet Used For Financial Fraud

An anonymous reader writes "A large Zeus version 2 botnet is being used to conduct financial fraud in the UK and is operated from Eastern Europe. The botnet appears to be controlling more than 100,000 infected computers. The criminals have been harvesting all manner of potentially lucrative and revenue-producing credentials — including online account IDs plus login information to banks, credit and debit card numbers, account types plus balances, bank statements, browser cookies, client side certificates, login information for email accounts and social networks, and even FTP passwords."

Comments

I predicted this

[1s44c]

Botnet herders have access to a very large number of computers, it was only a matter of time until they realized that the data on these computers is worth far more than the few pence they are making from Viagra spam and blackmailing gambling sites with DDOS attacks.

Re:I predicted this

[Delarth799]

Usually people who end up infected with this sort of stuff are the same people who ignore the patches and updates for the operating system, which usually happens to be windows. They almost never download and install the updates because it slows down their web browsing or whatever and to them they just see it as an annoyance. They likely have only the most basic of anti-virus software installed and never actually bother to run it, or they just don't have anything at all. They click on ads left and right because it says "free download" or some other crap and they probably wouldn't know that the advertisement for free wallpapers or whatever could do anything bad to their computers. The people who usually get infected are the same across the board sadly enough, they don't care to take a few basic steps to protect themselves and take the 20 minutes or so to just get some good anti-virus software on their computer and run it once a week or not open and download every advertisement they see and click on every link in every email they get which is probably where most of them get infected from. Now I am sure there are a small percentage who are very tech and security savvy and take good measures to stop infections and whatnot and something may have slipped through, but again that's likely a very small percentage.

Re:I predicted this

[Anonymous Coward]

They simply did like my wife and my mother-in-law, they pressed "okay" when the pop-up came asking them to install this weird executable that they didn't ask for. They just wanted the pop-up to go away, you see.

Firewall, anti-virus, tea-timer, a host of other security measures... but you can't fix the user.

Time to go back to phone banking

[davidwr]

Hmm maybe we should go back to phone banking. It's not like phones can be easily hacked to sniff passwords.

Oh wait, I forgot, we aren't in the 1980s any more. Nevermind.

I think I'll do my business in person now. I'll just have to make sure the Russian Mafia doesn't set up a look-alike storefront down the street that looks like my bank's latest branch office.

Sigh.

Well, at least I know my currency is real.

Re:That's awesome, but...

[Securityemo]

Anyone doing that would be liable ten ways till Sunday. Anyone doing that to several banks would be called "A one-man super-hacker ring bent on destroying the western economic system."

Re:Oh no

[datapharmer]

the browser support for ftp is typically intended for anonymous browsing. If you want full fledged support for ftp and its secured variants get an ftp client. I don't complain that filezilla doesn't browse the web well...

Re:Pardon me, I have to ask...

[jbeach]

It seems clear to my personal experience, and friends of mine who are in computer security, that Os X and Linux are orders of magnitude more secure than Windows.

While I'm sure OS X and Linux can be exploited, I think we'd all be far safer if they were adopted to anywhere near the ubiquity of windows. And who knows? That may be soon, if Google apps and other productivity software is available for free or cheap as compared to Windows, and its current lock on business drone software.