ZeuS circulates in ATO spam

Powered by SC Magazine
 

Tax Office warns of Trojan virus.

Cybercriminals are circulating a variant of the ZeuS Trojan via a spam campaign that claims to offer tax refunds, the Australian Taxation Office (ATO) has warned.

The scam emails claimed to be from the ATO and contained Trojan.Zbot malware within a zip file named ‘Restore your account’.

Also included in the zip file was a message that asked recipients to provide their personal and credit or debit card details in order to receive a refund.

Tax Commissioner Michael D’Ascenzo warned the community that the ATO would never request those details by email.

“Any email requesting personal and credit or debit card details before a refund can be released is a hoax,” he stated.

According to security vendor Symantec, Trojan.Zbot affected Windows Vista and previous Windows operating systems and was used to steal confidential information from a compromised computer.

It typically gathered system information, online credentials and banking details contained within the Windows Protected Storage (PStore) system.

ZeuS malware was created using Trojan-building toolkits that ranged in price from US$40 ($39) to US$4,000, and could force compromised computers to become part of a botnet.

The malware was believed to have been used in the theft of US$415,000 from the Bullitt County treasury in Kentucky in mid-2009.

Copyright © iTnews.com.au . All rights reserved.


ZeuS circulates in ATO spam
Tags
 
 
 
Top Stories
Photos: Global Switch opens Sydney East data centre
First stage opened, to some fanfare.
 
ATO releases long-awaited Bitcoin guidance
Everyday investors escape the tax man.
 
Why the Weather Bureau’s new supercomputer is a 'gamechanger'
IT transformation starts to reap results.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  68%
 
Advanced persistent threats
  3%
 
Unpatched or unsupported software vulnerabilities
  12%
 
Denial of service attacks
  7%
 
Insider threats
  11%
TOTAL VOTES: 487

Vote