Forest Global Training Partners

Cyber Risks · Krebs on Security

Trojan Tricks Victims Into Transferring Funds

Summary: Germany's Federal Criminal Police (BKA) warned consumers about a Windows malware strain that waits until the victim logs in to online banking, then displays a message claiming a credit was made to the account by mistake and the account is frozen until the payment is transferred back. The malware alters the balance shown in the browser to make a large incoming transfer appear real and presents a pre-filled transfer form with the attacker's account and routing numbers, an approach the BKA describes as an extension of Web injects pioneered by the URL Zone Trojan.

Why it matters: The attack does not need to defeat the bank's authentication because the customer authorizes the transfer themselves, and Krebs notes that retail consumers can recover funds under the law while businesses generally cannot.

Read the original at Krebs on Security ↗

Topics
Malware
Related