Broadband Tech > Security > Security > eurograbber gets pins etc from android phones

eurograbber gets pins etc from android phones

Major £30m cyberheist pulled off using MOBILE malware

quote:

---

The malware-based attack targeted both corporate and private banking users, performing automatic transfers that varied from €500€ to €250,000 to intermediary accounts controlled by members of the gang. The fraud used malware based on the infamous ZeuS cybercrime toolkit to target the PCs and mobile phones of banking customers. It circumvented SMS messages used by banks to secure customers’ account logins and authenticate transactions, according to firewall and security tools firm Check Point.

The attack worked by infecting victims’ PCs and mobiles with a modified version of the Zeus trojan. When victims attempted online bank transactions, the process was intercepted by the trojan. Under the guise of upgrading the online banking software, victims were duped into giving additional information including their mobile phone number, infecting the mobile device. The mobile Trojan worked on both Blackberry and Android devices, giving attackers a wider reach.

---

quote:

---

After news of the ‘Eurograbber’ bank fraud malware campaign broke yesterday, the autopsy on what went wrong has begun. The general consensus is that the banks must do more to protect their customers.

In fact, the banks thought they were already doing more by widely introducing two-factor authentication for online transactions involving an out-of-band transaction authentication number (TAN) sent to the customer’s mobile phone. If stolen log-in credentials were being used by a criminal, the new unique TAN would remain unknown, and without it a transaction could not proceed. The Eurograbber campaign.

---

reply to andgrab
17 December 2012
The Eurograbber campaign exposed earlier this month, netting €36 million for the criminals, was a Zeus-in-the-mobile (Zitmo) attack. Late last week, the AV companies started to warn about new Android trojans: Citmo, or Carberp-in-the-mobile.

Full Article