Forest Global Training Partners

Cyber Risks · Krebs on Security

‘White House’ eCard Dupes Dot-Gov Geeks

Summary: A malware-laced email spoofing holiday greetings from The White House infected recipients with a ZeuS Trojan variant that stole passwords and documents and uploaded them to a server in Belarus, pulling more than 2 gigabytes of PDFs, Word and Excel files from dozens of victims. Among those identified were an employee at the National Science Foundation's Office of Cyber Infrastructure, an intelligence analyst with Massachusetts State Police who may have recently received top-secret clearance, and staff at the Financial Action Task Force and the Millennium Challenge Corporation.

Bottom line: The document-stealing component was a Perl script compiled with Perl2exe, a technique NetWitness linked to the earlier Hilary Kneber botnet that infected some 75,000 PCs - and the stolen cache included court-ordered cell phone intercept records and a DHS tip sheet on safeguarding national security information.

Read the original at Krebs on Security ↗

Topics
Malware
Related