New Findings Lend Credence to Project Blitzkrieg
Summary: McAfee research published December 13 says the Project Blitzkrieg plan to hire 100 botmasters for ebanking heists against 30 U.S. financial institutions is authentic, tracking hundreds of Gozi Prinimalka infections and at least 500 victims linked to the poster vorVzakone. The malware carries Campaign ID 064004, first seen in the wild on April 14, 2012, and a third variant tied to Romanian servers appeared after vorVzakone's September 2012 call-to-arms post.
What you should know: The targeted list includes investment banks such as Fidelity, Schwab, Ameritrade and eTrade, and Prinimalka's virtual-machine-synching module clones a victim's time zone, screen resolution, cookies and browser version while routing through a SOCKS proxy on the infected PC to present the genuine IP address - defeating the device fingerprinting those institutions rely on.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026