Zeus cloaked in tax returns

Powered by SC Magazine
 

Bank robbing trojan promises fund transfers.

A large Zeus spam campaign is being delivered via fake emails from the US Federal Reserve and the Internal Revenue Service.

Researchers at Barracuda Labs first spotted the huge uptick in the malicious messages on Monday when the emails were blocked before reaching some 120,000 users within 10 minutes.

The bogus Federal Reserve emails appeared to target staff in charge of an organisation's finances. The body of the messages encourage recipients to click on a malicious link for more information about a wire fund transfer that was not processed.

Users who click on the link are then asked to install an executable, which actually is the data-stealing Zeus trojan, notorious for keylogging the corporate banking credentials belonging to small and midsize businesses, school districts and charities.

"The goal is to steal money from you," Barracuda researcher Luis Chapetti said.

On Wednesday, the fraudsters switched their tactics to leverage the IRS name in their emails. The messages contained the same payload, but victims were told that their federal tax payment was cancelled by their bank and were encouraged to click on the malicious link for further details.

"The potential is there for people to be affected, especially at these volumes," said Barracuda researcher David Michmerhuizen.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition


Zeus cloaked in tax returns
 
 
 
Top Stories
Toll Group to go Google
Poaches Woolworths project manager.
 
How News Corp's CIO tackled skills in his race to the cloud
What to do when your team’s talents are no longer needed.
 
Photos: How Thodey transformed Telstra
From turbulent Trujillo to Australia's leading telco.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  35%
 
Your insurance company
  5%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  4%
 
A Federal Government agency (ATO, Centrelink etc)
  18%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  7%
TOTAL VOTES: 3955

Vote
Do you support the abolition of the Office of the Information Commissioner?

   |   View results
I support shutting down the OAIC.
  27%
 
I DON'T support shutting the OAIC.
  73%
TOTAL VOTES: 1346

Vote