Cyber Risks · Krebs on Security

Zeus Attack Spoofs NSA, Targets .gov and .mil

Summary: A Zeus banking Trojan campaign spoofed NSA and intelink.gov addresses and was sent exclusively to .gov and .mil recipients, luring them to open a malicious file named after the National Intelligence Council's real "2020 Project" report. One state government agency confirmed "a couple hundred" infections, and only 16 of 39 VirusTotal scanners detected the file as malicious.

What you should know: The malware steals passwords and gives attackers remote control of infected PCs, and the same Zeus tool has been used to drain state and local government bank accounts - the town of Poughkeepsie reported $378,000 stolen, with $95,000 recovered from a Ukrainian bank.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related