The FBI announced this week that dozens of individuals have been charged in the US and Europe with creating a computer virus and using it to siphon millions of dollars from victims’ bank accounts.
The Zeus trojan, also known as Zbot, targets PCs and cell phones with malware-infested emails and websites. Once the infection is present, cyber thieves are able to record keystrokes and obtain login credentials for online banking systems.
Thieves allegedly sent emails and text messages to individuals with professional titles that indicated they were high-ranking financial officers of organizations where large transactions would not raise red flags. Money was electronically transferred to the accounts of “money mules” who used fake passports to establish a banking presence in the US. Funds were then transferred from the mule accounts to financial institutions in Russia.
According to Cisco, the Zeus trojan attack peaked last Monday with 25% of all spam emails worldwide containing the malware. The thieves targeted users of the LinkedIn social network by posing as a contact request.
"As [these] arrests show, the modern, high-tech bank heist does not require a gun, a mask, a note, or a getaway car,” said US Attorney Preet Bharara. “It requires only the Internet and ingenuity.”
Even those who keep antivirus software and definitions up-to-date on their computers are susceptible to the Zeus attack. The perpetrators frequently change the code so the malware is able to avoid detection.
If you’re concerned that you may be a victim of the trojan attack, several blogs have advice on what to look for and how to remove an infection if present.
Unfortunately, as technology advances, those who create malware are getting more sophisticated in their attacks. Infections like this are sure to become more prevalent. This is a great reminder to be careful on social networking websites and not accept requests from people you don’t recognize as a friend or colleague.
