Guiding consumers since 2009

New malware can steal your banking details

By Angelique Ruzicka

Kaspersky Lab researchers have detected new malware which has been designed to steal the credentials of online banking customers. Earlier versions of the Trojan were known to the security industry as TinyNuke, but lacked the features necessary to launch attacks. The latest versions however, referred to as NukeBot, are fully operable and contain code to target the users of specific banks.   

Kaspersky are concerned that criminals have a ready-to-attack version of the Trojan, as they fear it shows signs of a potential wide-scale malicious campaign, to infect multiple users.

NukeBot is a banking Trojan and upon infection it “injects” malicious code into the webpage of an online banking service displayed in a victim’s browser and then steals user data and spoofs their credentials. 

There are already a number of compiled samples of this Trojan shared on underground hacking forums says Kaspersky. While most of these are rough, barely operational malware drafts; the firm believes there are some more developed versions out there that could be a real threat. 

Around 5% of all samples found by Kaspersky Lab were NukeBot’s new ‘combat versions’, which have improved source codes and attacking capacities. Among other things these versions contain injections – specific pieces of code, which mimic parts of user interface of real online banking services. Based on the analysis of injections, Kaspersky believe the main targets of the new version of NukeBot are users of several French and US banks. 

In addition, Kaspersky Lab researchers managed to detect several NukeBot modifications that didn’t have web injection functionality, and were designed to steal mail client and browser passwords. This means that developers of new versions may aim to widen the functionality of this malware family. 

“While criminals behind recent versions of this malware currently are not actively distributing NukeBot, this may, and likely will, change very soon. We’ve already seen this before with some other malware families: after a short testing period of a ready-to-attack malware, criminals start distributing it widely through infected websites, spam and phishing. So far we have seen NukeBot versions which are ready to attack the customers of at least six banks located in France and the US, however this list of targets looks like only the beginning. The goal of our brief research is to warn the banking community and online banking customers about a potentially emerging threat. We urge interested parties to use the results of our research in order to protect themselves from this threat in advance,” said Sergey Yunakovsky, security expert at Kaspersky Lab.

Recent Articles

Featured Get personal with your finances – and tie the knot

As time passes, your financial products may not live up to your needs. Therefore, it’s important to take stock of what you’re paying for and adjust where necessary. We got in touch with financial advisers to find out how you can get your finances in order, and what you should do to ensure you’re financially stable.

Personal loan or business loan? The best way to finance your business

When starting your own business, you may have to rely on external funding. Perhaps you qualify for a personal loan, but would it be better to take out a business loan instead? We got in touch with a specialist to find out whether it’s best to take out a business loan or a personal loan to assist you with your ongoing business or start-up.

What to do when you’ve been denied a home loan

After months of scanning property sites and attending showhouse after showhouse, you’ve finally found what you’ve been looking for. But your dream of owning a home comes crumbling down when you receive the news that you’ve been denied a home loan. So, what now?

Best travel cards offered by top South African banks

Planning a trip abroad involves a lot of administration. You need to consider travelling arrangements, reasonable accommodation, and a daily itinerary. But have you considered how you’re going to pay your bills once you arrive? Besides considering bank costs, you also need to consider exchange rates.

Deals

Takealot January Big Sale

Price: Available on request
When: Until 31 January 2020
Where: Online

Annique Restore Package Special

Price: From R600
When: Until 31 January 2020
Where: Centurion

Ster-Kinekor Senior Citizens Discount

Price: Available on request
When: Daily
Where: Nationwide