Bank Accounts Vulnerable For Victims of ZeuS Trojan Variant 'Gameover'
tsu doh nimh writes "Organized crooks have begun launching debilitating cyber attacks against banks and their customers as part of a smoke screen to prevent victims from noticing simultaneous high-dollar cyber heists, the FBI is warning. The thefts, aided by a custom variant of the ZeuS Trojan called 'Gameover,' are followed by distributed denial of service (DDoS) attacks against banks and the victim customers. The feds say the perpetrators also are wiring some of the money from victim organizations directly to high-end jewelry stores, and then sending money mules to pick up the pricey items."
One day, I was browsing Google Image Search, looking to identify an ambiguous connector. (it ended up being a connector from JST)
Suddenly, I'm greeted with a UAC prompt. Having done nothing to instigate a UAC prompt, I immediately killed firefox. Nonetheless, there was a rogue process on my machine that was attempting to gain root access by desperately popping up anti-virus messages. Being an intelligent user, I discovered what process was responsible and promptly killed and deleted the offending binary from my machine.
I never even clicked anything.
:(){
>A large attack vector for SEO poisoning is image searches
I personally ran into this while looking for flooding pictures in Warwick RI a couple of springs back.
Nearly half the Google results on the first page were SEO malware sites.
--
BMO