Big Scores and Hi-Scores
Summary: A Krebs on Security post from March 2011 describes a ZeuS Trojan administrative panel that collects stolen PayPal and Bank of America credentials and includes a button labeled "Pacman" that launches a playable replica of the 1980s arcade game. The panel also injects challenge/response questions into Bank of America's page in the victim's browser to capture the answers, exports stolen credentials to a .csv file, and alerts the botmaster via Jabber instant message when new credentials arrive.
What's compelling: The same panel carries an "Arcot" tab, and Arcot Systems software powers MasterCard SecureCode and Visa's Verified by Visa - meaning the thieves gathered personal data on card holders that could defeat those authentication systems.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026