ZeuS Trojan Attack Spoofs IRS, Twitter, Youtube
Summary: A major email campaign is spreading the ZeuS Trojan through spam disguised as IRS fraud alerts, Twitter account hijack warnings, and YouTube video links, according to Gary Warner of the University of Alabama, Birmingham, extending a malware spam campaign that began at the end of May. The fake IRS messages use the subject line "Notice of Underreported Income" and shortened URLs that resolve to spoofed IRS pages hosting a password-stealing program that only three of 40 anti-virus products detected as malicious.
Why it matters: The same criminal gangs behind these attacks have stolen tens of millions of dollars from small to mid-sized businesses, including $150,000 taken from a New York landfill service company's online bank account in September 2009 after an employee opened a bogus IRS email.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026