SecureWorks finds stolen data cache, variants of Prg trojan

Powered by SC Magazine
 

Researchers at SecureWorks have discovered several caches of stolen data containing the personal and financial information of 10,000 corporate and home PC users, as well as new variants of the Prg trojan.

The caches contain bank and credit union, credit card and Social Security numbers, usernames and passwords, according to SecureWorks officials.

Researcher Don Jackson said that hackers are working around encryption standards.

"When data is located, it is always encrypted to keep others from ‘leeching.’ New variants of the trojan have new ways of encrypting that data, making old analysis tools obsolete," said Jackson. "New encryption methods must be reverse-engineered from raw machine code."

The company said that the trojan’s variants have the ability to lift sensitive data from PCs before that data is encrypted and sent to SSL-protected sites. Numerous hacker groups have launched attacks using the malware, according to SecureWorks.

Jackson told SCMagazine.com today that the trojan highlights the trend of increased use of malware-creation kits.

Earlier this month, trojans controlled by Russian gangs attacked mostly Italian victims in a large-scale operation aided by the MPACK kit.

"It’s being posted on hacker sites in the underground, and people just buy it and use it," he said, adding that the kits "allow people to send out these variants pretty quickly."

SecureWorks finds stolen data cache, variants of Prg trojan
 
 
 
Top Stories
Business-focused Windows 10 brings back the Start menu
Microsoft skips 9 for the "greatest enterprise platform ever".
 
Feeling Shellshocked?
Stay up to date with patching for the Bash bug.
 
Amazon forced to reboot EC2 to patch Xen bug
Rolling restarts over next week.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  66%
 
Advanced persistent threats
  5%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  6%
 
Insider threats
  12%
TOTAL VOTES: 1375

Vote