Malware Spreading Through Phony FDIC Alerts

Author: Ryan Naraine

November 2, 2009 4:46 pm

There are reports of phony FDIC notification e-mails tricking computers users into installing the ZBot identity-theft Trojan. The e-mails
tell the recipients that their banks have filed for bankruptcy and that
the banks’ asserts are now under the control of the FDIC. The links
offered in the message lead to a page that offers users a chance to see
their “personal FDIC insurance file(s),” but which actually installs
the Zeus or ZBot Trojan on their PCs. See the FDIC warning [fdic.gov]

There are reports of phony FDIC notification e-mails tricking computers users into installing the ZBot identity-theft Trojan. The e-mails
tell the recipients that their banks have filed for bankruptcy and that
the banks’ asserts are now under the control of the FDIC. The links
offered in the message lead to a page that offers users a chance to see
their “personal FDIC insurance file(s),” but which actually installs
the Zeus or ZBot Trojan on their PCs. See the FDIC warning [fdic.gov]

Suggested articles

solarwinds turla connection

SolarWinds Hack Potentially Linked to Turla APT

Researchers have spotted notable code overlap between the Sunburst backdoor and a known Turla weapon.

malware download pastebin

Malicious Software Infrastructure Easier to Get and Deploy Than Ever

Researchers at Recorded Future report a rise in cracked Cobalt Strike and other open-source adversarial tools with easy-to-use interfaces.

ryuk malware payments total

Ryuk Rakes in $150M in Ransom Payments

An examination of the malware gang’s payments reveals insights into its economic operations.