Tag: brazil
-
VB2017 video: Client Maximus raises the bar
Brazil has long been known as a hotbed of cybercrime, but what makes the country especially unique is that a lot of this cybercrime is inwards-focused. Thus there are many malware strains written explicitly to target the country. One of them is Client Maximus, a banking trojan discovered in 2017 by researchers from IBM Trusteer…
-
VB2017 video: Client Maximus raises the bar
Brazil has long been known as a hotbed of cybercrime, but what makes the country especially unique is that a lot of this cybercrime is inwards-focused. Thus there are many malware strains written explicitly to target the country. One of them is Client Maximus, a banking trojan discovered in 2017 by researchers from IBM Trusteer…
-
MnuBot banking trojan communicates via SQL server
Researchers at IBM X-Force have discovered a new banking trojan, dubbed ‘MnuBot’, which is targeting Internet users in Brazil. The trojan performs tasks common to banking malware, such as logging keystrokes, creating screenshots and overlaying the bank’s website with an invisible form. What is most noticeable, though, is the use of a Microsoft SQL server…
-
MnuBot banking trojan communicates via SQL server
Researchers at IBM X-Force have discovered a new banking trojan, dubbed ‘MnuBot’, which is targeting Internet users in Brazil. The trojan performs tasks common to banking malware, such as logging keystrokes, creating screenshots and overlaying the bank’s website with an invisible form. What is most noticeable, though, is the use of a Microsoft SQL server…
-
Guest Blog: Malicious Scripts Gaining Prevalence in Brazil
In the run up to VB2016, we invited the conference sponsors to write guest posts for our blog. In the second of this series, ESET’s Matías Porolli writes about malicious Visual Basic and JavaScript gaining prevalence in Brazil. Had we looked at the map of malware detections in Brazil a year ago, we would have seen…
-
Guest Blog: Malicious Scripts Gaining Prevalence in Brazil
In the run up to VB2016, we invited the conference sponsors to write guest posts for our blog. In the second of this series, ESET’s Matías Porolli writes about malicious Visual Basic and JavaScript gaining prevalence in Brazil. Had we looked at the map of malware detections in Brazil a year ago, we would have seen…
-
VB2014 paper: P0wned by a barcode: stealing money from offline users
Fabio Assolini explains how cybercriminals are targeting boletos. Since the close of the VB2014 conference in Seattle in October, we have been sharing VB2014 conference papers as well as video recordings of the presentations. Today, we have added ‘P0wned by a barcode: stealing money from offline users’ by Kaspersky Lab researcher Fabio Assolini. If you…
-
DNS poisoning attack targeting Brazilian customers
ISP employee suspected of changing DNS cache. Millions of Internet users in Brazil may have been exposed to malware after the DNS caches of their ISPs were modified to redirect them to servers controlled by cybercriminals. DNS (Domain Name System) is the system used by computers on the Internet to resolve domain names (e.g. www.virusbtn.com…
-
Trojan uses remote user account to control compromised machine
Malware targets customers of Brazilian banks. Researchers at Kaspersky have discovered a piece of malware aimed at customers of Brazilian banks which creates a remote user account to enable attackers to take full control of the compromised machine. The malware is spread via an email that poses as an update to Flash Player . Although…
-
Banking malware hosted on Amazon’s cloud servers
Trojan targets mostly Brazilian banks. Researchers have discovered malware hosted on Amazon Web Services that steals victims’ bank account data. Acting as a rootkit, the malware attempts to deactivate at least four different anti-virus programs as well as a special security application used by many Brazilian banks to protect their customers’ online banking accounts. The…