Author Archives: Itzik Chimino

Gozi strikes again, targeting banks, cryptocurrency and more

Posted on by

In the world of cybercrime, malware plays a prominent role. One such malware, Gozi, emerged in 2006 as Gozi CRM, also known as CRM or Papras. Initially offered as a crime-as-a-service (CaaS) platform called 76Service, Gozi quickly gained notoriety for its advanced capabilities. Over time, Gozi underwent a significant transformation and became associated with other […]

The post Gozi strikes again, targeting banks, cryptocurrency and more appeared first on Security Intelligence.

Continue reading Gozi strikes again, targeting banks, cryptocurrency and more→

The rise of malicious Chrome extensions targeting Latin America

Posted on by

In its latest research, IBM Security Lab has observed a noticeable increase in campaigns related to malicious Chrome extensions, targeting  Latin America with a focus on financial institutions, booking sites, and instant messaging. This trend is particularly concerning considering Chrome is one of the most widely used web browsers globally, with a market share of […]

The post The rise of malicious Chrome extensions targeting Latin America appeared first on Security Intelligence.

Continue reading The rise of malicious Chrome extensions targeting Latin America→

Kronos Malware Reemerges with Increased Functionality

Posted on by

The Evolution of Kronos Malware The Kronos malware is believed to have originated from the leaked source code of the Zeus malware, which was sold on the Russian underground in 2011. Kronos continued to evolve and a new variant of Kronos emerged in 2014 and was reportedly sold on the darknet for approximately $7,000. Kronos […]

The post Kronos Malware Reemerges with Increased Functionality appeared first on Security Intelligence.

Continue reading Kronos Malware Reemerges with Increased Functionality→

Ursnif Leverages Cerberus to Automate Fraudulent Bank Transfers in Italy

Posted on by

Contributed to this research: Segev Fogel, Amir Gendler and Nethanella Messer.   IBM Trusteer researchers continually monitor the evolution and attack tactics in the banking sector. In a recent analysis, our team found that an Ursnif (aka Gozi) banking Trojan variant is being used in the wild to target online banking users in Italy with […]

The post Ursnif Leverages Cerberus to Automate Fraudulent Bank Transfers in Italy appeared first on Security Intelligence.

Continue reading Ursnif Leverages Cerberus to Automate Fraudulent Bank Transfers in Italy→

Ramnit Targets Japanese Shoppers, Aiming at Top Fashion Brands

Posted on by

In a recent analysis of Ramnit Trojan targets, IBM X-Force looked into the way the malware’s operators target e-commerce vendors in Japan — the gang’s active attack turf nowadays.

The post Ramnit Targets Japanese Shoppers, Aiming at Top Fashion Brands appeared first on Security Intelligence.

Continue reading Ramnit Targets Japanese Shoppers, Aiming at Top Fashion Brands→

IcedID Operators Using ATSEngine Injection Panel to Hit E-Commerce Sites

Posted on by

The X-Force research team investigated the IcedID Trojan’s two-step injection attack that enables it to steal access credentials and payment card data from e-commerce customers in North America.

The post IcedID Operators Using ATSEngine Injection Panel to Hit E-Commerce Sites appeared first on Security Intelligence.

Continue reading IcedID Operators Using ATSEngine Injection Panel to Hit E-Commerce Sites→