Zeus Variant 'Floki Bot' Targets PoS Data (onthewire.io)

Trailrunner7 quotes a report from On the Wire: Malware gangs, like sad wedding bands bands, love to play the hits. And one of the hits they keep running back over and over is the Zeus banking Trojan, which has been in use for many years in a number of different forms. Researchers have unearthed a new piece of malware called Floki Bot that is based on the venerable Zeus source code and is being used to infect point-of-sale systems, among other targets. Flashpoint conducted the analysis of Floki Bot with Cisco's Talos research team, and the two organizations said that the author behind the bot maintains a presence on a number of different underground forums, some of which are in Russian or other non-native languages for him. Kremez said that attackers sometimes will participate in foreign language forums as a way to expand their knowledge. Along with its PoS infection capability, Floki Bot also has a feature that allows it to use the Tor network to communicate. "During our analysis of Floki Bot, Talos identified modifications that had been made to the dropper mechanism present in the leaked Zeus source code in an attempt to make Floki Bot more difficult to detect. Talos also observed the introduction of new code that allows Floki Bot to make use of the Tor network. However, this functionality does not appear to be active for the time being," Cisco's Talos team said in its analysis.

Comments

It's all in the name.

[dcw3]

Someone's been watching too much TV...
http://vikings.wikia.com/wiki/...

Thank God it doesn't target valuable data.

[Anonymous Coward]

Only Piece of Shit data.

Yo dawg

[Hognoxious]

sad wedding bands bands

Nice one, manishs.

Re:Floki ha ha ha

[OneHundredAndTen]

They meant Microsoft software.

Zeus Variant only targets Microsoft Windows

[khz6955]

'Zeus, ZeuS, or Zbot is a Trojan horse malware package that runs on versions of Microsoft Windows'

Zeus Variant and Malware gangs

[khz6955]

Don't you mean Microsoft Windows and Zeus Variant and Malware gangs

Re: Are we sure this is Russian?

[stealth_finger]

Why the double i?

Re: Are we sure this is Russian?

[JustAnotherOldGuy]

all you're capable of doing is attempting to discredit me by falsely labeling me a racist.

You're not a racist, you're an asshole. And if you ever dragged your goober ass through my neighborhood you'd be reclassified as a "target".

Re: Are we sure this is Russian?

[Hognoxious]

What double i?

Re: Are we sure this is Russian?

[stealth_finger]

Thankfully, niiggers aren't smart enough to do this

We need to rid ourselves of niiggers,

No more towelheads, niiggers, kikes, wetbacks, and chinks!

It's a fact that niiggers,

While niiggers

It's a fact that niiggers

Those ones, at least Mr "Not a racist" here is consistent.

Re: Are we sure this is Russian?

[Hognoxious]

I think there's a problem with your browser. Are you running Windows? If so, reinstall your OS.

Re: Are we sure this is Russian?

[stealth_finger]

II'm not reiinstalliing anythiing.