[null, null, {"document_url": "http://www.voiceofgreyhat.com/2012/10/Russian-Hackers-Targeting-US-Banks-With-Trojan.html", "unformatted_src": "http://1.bp.blogspot.com/-_P2pym5IQD8/UHq119SChbI/AAAAAAAAHZM/QH6VNUemUzo/s400/Russian-Hackers-Targeting-US-Banks-With-Trojan.jpg", "src": "http://1.bp.blogspot.com/-_P2pym5IQD8/UHq119SChbI/AAAAAAAAHZM/QH6VNUemUzo/s400/Russian-Hackers-Targeting-US-Banks-With-Trojan.jpg", "formatted_filename": "Russian Hackers Targeting US Banks With Trojan", "rendered_width": 400, "rendered_height": 246}, null, {"document_url": "http://www.voiceofgreyhat.com/2012/10/Russian-Hackers-Targeting-US-Banks-With-Trojan.html", "unformatted_src": "http://3.bp.blogspot.com/-RxwiSFen_Nw/TjQLGGZwd5I/AAAAAAAAAPw/mVJsXm-Qib0/s1600/images.png", "src": "http://3.bp.blogspot.com/-RxwiSFen_Nw/TjQLGGZwd5I/AAAAAAAAAPw/mVJsXm-Qib0/s1600/images.png", "formatted_filename": "images"}, null, null, {"document_url": "http://www.voiceofgreyhat.com/2012/10/Russian-Hackers-Targeting-US-Banks-With-Trojan.html", "unformatted_src": "http://www.linkwithin.com/pixel.png", "src": "http://www.linkwithin.com/pixel.png", "formatted_filename": "pixel", "alt_text": "Related Posts Plugin for WordPress, Blogger..."}, null, null, {"document_url": "http://www.voiceofgreyhat.com/2012/10/Russian-Hackers-Targeting-US-Banks-With-Trojan.html", "unformatted_src": "https://lh6.googleusercontent.com/-j9r4g4Hdrp4/VGT-dp85TbI/AAAAAAAAJak/mW1vUIQXZCM/w674-h666-no/VOGH_Development.jpg", "src": "https://lh6.googleusercontent.com/-j9r4g4Hdrp4/VGT-dp85TbI/AAAAAAAAJak/mW1vUIQXZCM/w674-h666-no/VOGH_Development.jpg", "formatted_filename": "VOGH Development", "rendered_width": 290, "rendered_height": 400}, null, null, {"document_url": "http://www.voiceofgreyhat.com/2012/10/Russian-Hackers-Targeting-US-Banks-With-Trojan.html", "unformatted_src": "http://smallbusinessindia.intuit.in/wp-content/themes/default/images/twitter.png", "src": "http://smallbusinessindia.intuit.in/wp-content/themes/default/images/twitter.png", "formatted_filename": "twitter", "alt_text": "follow us on twitter!"}, null, null, null, null, {"document_url": "http://www.voiceofgreyhat.com/2012/10/Russian-Hackers-Targeting-US-Banks-With-Trojan.html", "unformatted_src": "http://i44.tinypic.com/a3f5h0.jpg", "src": "http://i44.tinypic.com/a3f5h0.jpg", "formatted_filename": "a f h", "rendered_width": 290, "rendered_height": 350}, null, null, null, null, null]
Most Organized Banking-Trojan Called 'Gozi Prinimalka' By Russian Hackers Targeting U.S. Banks

Posted by Avik Sarkar On 10/14/2012 06:25:00 pm We all might be aware of massive attack which took place last month, targeted several leading banking and financial sector of United States. The attack came just after 'anti Islamic' video was posted online. The US National Security officials accused the Iranian government for engaging cyber attacks against US Banks mainly Bank of America. Sooner or later the situation came under control. But cloud of trouble for US Banking sector is not gone completely, recently security professionals unveiled that a cartel of Russian hackers is planning to launch a separate attack aimed at stealing money from about 30 U.S. financial institutions, an apparent attempt to piggyback and capitalize on the ongoing cyber attacks on U.S. banks. The emergence of Russian hackers suggests a potential shift in the motivation of the cyber attacks from ideological to financial and also points to a longer duration of the ongoing attacks. Security experts have picked up on chatter in the cyber underworld indicating Russian cyber hackers have set their sights on about 30 U.S. financial institutions. Dubbed “Operation Blitzkrieg,” the attack is planned for this fall on 30 U.S. banks, though it’s not clear which specific institutions will be targeted. In a blog post last week, RSA said it “believes this is the making of the most substantial organized banking-Trojan operation seen to date.”

So far it’s not clear who the specific Russian hackers are, but famous security professional & blogger Brian Krebs pointed to series of posts beginning in early September on Underweb forums by a Russian hacker who uses the nickname “vorVzakone,” which translates to “thief in law.” RSA said “underground chatter” indicates the gang plans to deploy a Trojan, called “Gozi Prinimalka,” in an effort to complete fraudulent wire transfers via Man-In-The-Middle (MiTM) manual session-hacking scenarios. Herberger said MiTM is a type of attack that aims to deceive targets by violating otherwise secure communications, similar to tapping into a landline phone conversation or breaching a VPN session. “If successfully launched, the full force of this mega heist may only be felt by targeted banks in a month or two,” RSA said. The Trojan is part of a family of malware used by a crime gang that has successfully siphoned at least $5 million from banks, RSA said. The Russian hackers are also offering to pay individuals who help them carry out the attacks, indicating a desire to monetize the intrusions.

So now the vows of hacker group named 'Izz ad-Din al Qassam Cyber Fighters' is proving to be more dangerous for US. The hacker group earlier said "These series of attacks will continue until the Erasing of that nasty movie from the Internet". For your reminder this hacker group was responsible for all the major DDoS attacks against US financial sector. “It’s not uncommon that people who have a financial motive may try to take advantage of nefarious techniques,” said Herberger. “They will jump in because they can take advantage of the fact banks are laboring and security departments are becoming overrun and softened for a different kind of motivated attack.” The emergence of the threat from Russian groups underscores the prolonged nature of the attacks against corporations, especially in the financial industry. “Security teams are coming to terms that these attacks are long,” often measured in days and weeks, said Herberger. However, security teams often aren’t “staffed for attrition.”

-Source (FOX Business) 

Categories: Bank , cyber attack , Cyber Espionage , RSA , Russian-Hacker , security-news , Trojan , vulnerablity