Sunday, June 7, 02:37
Home security ZLoader banking malware is back! It was found in 100 malicious campaigns

ZLoader banking malware is back! It was found in 100 malicious campaigns

A banking malware called ZLoader, which last appeared in early 2018, has been detected in more than 100 email campaigns since the beginning of the year.

Trojan is in active development with 25 editions appearing since its return in December 2019, with the last being observed this month.

ZLoader malware

Malicious spam campaigns target users in the US, Canada, Germany, Poland and Australia with rants related to COVID-19 issues and invoices.

Researchers at Proofpoint today note in a report that the ZLoader thus distributed is different from the original variant observed between 2016 and 2018.

Multiple factors divide the strain of the virus into at least one malicious email campaign a day. They use PDF files linked to a document Microsoft Word with a macro code that downloads and executes a version of ZLoader.

From March, phishing emails about COVID-19 began to circulate. One of the emails allegedly warns recipients of fraud related to the new corona pandemic.

The IBM X-Force cited these campaigns as quite convincing documents which are said to contain details of state aid payments.

The current variant does not have some advanced features shown to its predecessor. For example, hiding is missing code and string encryption. Nevertheless, it remains a significant threat.

Uses web injections to steal credentials and private banking information from victims, as well as sensitive data stored in browsers such as and passwords.

The threat factor uses these data to connect to the victim's online bank account. Using a VNC (Virtual Network Computing) client, they perform transactions from the compromised computer.

This does not raise suspicions in the bank, as the transfer starts with him computer of the customer using the correct credentials. It also makes it harder to challenge fraudulent transactions.

ZLoader is also known as Zeus Sphinx, Terdot and DELoader. It is a variation of the infamous Zeus used to steal tens of millions in 2010.

In the past, Zeus was priced between $ 3000 and $ 4000 and was the top malware they use Criminals specializing in financial fraud.

LEAVE ANSWER

Please enter your comment!
Please enter your name here

Teo Ehc
Teo Ehchttps://www.secnews.gr
Be the limited edition.

LIVE NEWS

Lyrics from AI technology or from people: Can you tell them apart?

While a large percentage of people can recognize when they are talking on a chatbot instead of a human operator, it seems that this is not the case ...

Technology and children: When are they ready for safe use?

Today's children and teens use various messaging apps and social media to ...

Call of Duty Black Ops Cold War: The first video leaked

The first video from the gameplay of Call of Duty 2020, which is rumored to be called Black Ops Cold War, has just been revealed.

Elon Musk: "It's time to break up Amazon"

Elon Musk intensifies the fight with Jeff Bezos with a new tweet: The General Manager of Tesla Inc., Elon Musk, said ...

Attack on America's 5G towers on Saturday!

Protests over 5G connectivity are scheduled to take place over the weekend, according to NATE. According to a recommendation that was identified ...

Windows 10 Updates: You can block them with Wu10Man!

Microsoft launched the Windows 10 update in May 2020, so it will be available on your computer soon ....

ECh0raix Ransomware: New campaign targets QNAP NAS devices!

Malicious agents behind eCh0raix Ransomware have launched a new campaign targeting QNAP NAS devices. ECh0raix was observed ...

Mac: How to change the storage location of your screenshots?

When you take screenshots on your Mac device using the Shift-Command-3 shortcut to take a screenshot of the entire computer screen or Shift-Command-4 ...

Malware USBCulprit: Aims devices that are not connected to a network

Did you think that devices without any connection to a local or other network (air-gapped devices) are safe? Think again! The USBCulprit malware that ...

Free Microsoft Teams: You can finally create meetings!

Users of the free version of Microsoft Teams can now create video meetings. The change, identified by ...