Cyber Risks · Krebs on Security

Spy Software Aims to Corral Money Mules

Summary: A Krebs on Security investigation found that a fictitious mule recruitment firm called VIP One requires new recruits to install a 'time tracking' application that periodically takes screenshots of the user's desktop and hijacks the webcam, uploading the images to gyazo.com. The software was observed in a Windows XP virtual machine monitored with Wireshark, and the screenshots appeared to be taken at random intervals.

Why it matters: Recruits who installed this tool to earn a paycheck handed over images of their desktops and webcam feeds to criminals who could use them for blackmail or to build fake profiles, and the article notes the operation could have collected thousands of images even from a handful of mules.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related