Monster Spam Campaigns Lead to Cyberheists
Summary: Phishers blasted high volumes of fraudulent NACHA-themed emails in late September 2011 to spread password-stealing banking Trojans, and Symantec reported an unprecedented jump in spam carrying polymorphic malware. Victims included Oncology Services of North Alabama (about $120,000 stolen Sept. 13), the North Putnam Community School Corporation in Indiana (about $98,000, later returned), and the City of Oakdale, California ($118,000).
Key Takeaway: The attacks worked through social engineering, not technology gaps: the victims Krebs interviewed were running anti-virus, and ZeuS variants averaged only about 38 percent detection. Thieves added money mules to victim payrolls and pushed fraudulent batches through online banking credentials, so a bank that is expected to catch the fraud is a costly assumption.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026