Guiding consumers since 2009

New malware can steal your banking details

By Angelique Ruzicka

Kaspersky Lab researchers have detected new malware which has been designed to steal the credentials of online banking customers. Earlier versions of the Trojan were known to the security industry as TinyNuke, but lacked the features necessary to launch attacks. The latest versions however, referred to as NukeBot, are fully operable and contain code to target the users of specific banks.   

Kaspersky are concerned that criminals have a ready-to-attack version of the Trojan, as they fear it shows signs of a potential wide-scale malicious campaign, to infect multiple users.

NukeBot is a banking Trojan and upon infection it “injects” malicious code into the webpage of an online banking service displayed in a victim’s browser and then steals user data and spoofs their credentials. 

There are already a number of compiled samples of this Trojan shared on underground hacking forums says Kaspersky. While most of these are rough, barely operational malware drafts; the firm believes there are some more developed versions out there that could be a real threat. 

Around 5% of all samples found by Kaspersky Lab were NukeBot’s new ‘combat versions’, which have improved source codes and attacking capacities. Among other things these versions contain injections – specific pieces of code, which mimic parts of user interface of real online banking services. Based on the analysis of injections, Kaspersky believe the main targets of the new version of NukeBot are users of several French and US banks. 

In addition, Kaspersky Lab researchers managed to detect several NukeBot modifications that didn’t have web injection functionality, and were designed to steal mail client and browser passwords. This means that developers of new versions may aim to widen the functionality of this malware family. 

“While criminals behind recent versions of this malware currently are not actively distributing NukeBot, this may, and likely will, change very soon. We’ve already seen this before with some other malware families: after a short testing period of a ready-to-attack malware, criminals start distributing it widely through infected websites, spam and phishing. So far we have seen NukeBot versions which are ready to attack the customers of at least six banks located in France and the US, however this list of targets looks like only the beginning. The goal of our brief research is to warn the banking community and online banking customers about a potentially emerging threat. We urge interested parties to use the results of our research in order to protect themselves from this threat in advance,” said Sergey Yunakovsky, security expert at Kaspersky Lab.

Recent Articles

Featured How to identify an investment scam

Many people invest a lot of money for their future and that of their offspring. Unfortunately, some of them never reap the benefits because the investments were scams. Luckily, there are ways you can find out if an investment opportunity is too good to be true.

Financial conflict can lead to divorce – here’s how to prevent it

Talking about money is an intimate matter, and it may be uncomfortable for couples who’ve managed to avoid this discussion. However, it will become necessary at some point or other. Do you think you’re ready to talk to your partner about money?

This is how much you should spend on accommodation

As your salary changes over time, your expenses will change too. But what if you’re spending an exceedingly large percentage of your income on accommodation? Is it feasible or even recommended in our current stressful financial climate?

How to be “future greedy” with passive income

Setting up numerous streams of income is a safe way to protect yourself from the loss of your main stream of income. Better yet, setting up passive streams of income will ensure you always have money coming in, without costing you additional working hours. So, what is “passive income”, and how can you earn this?

Deals

Get 50% off your friend’s treatment at Mangwanani Spa

Price: from R250
When: Until 30 August
Where: KZN and JHB

Telkom LTE lockdown Deal

Price: R369 per month
When: Until 31 August 2020
Where: Nationwide

Save up to 20% on your car insurance with MiWay

Price: Available on request
When: Daily
Where: Nationwide


Latest Guide

Guide to debt rehabilitation solutions