Home · Security

Russian crimeware host is knocked off the web

A Russian internet host reportedly popular with gangs who stole online bank logins has been taken offline.

The PROXIEZ-NET service had previously advertised itself as immune to attempts to shut it down.

Miko Hypponen, chief research officer at F-Secure, said the development was "very nice".

He warned that those who used the host for malicious purposes will almost certainly "already be switching to a different service."

Crimeware Mr Hypponen said that PROXIEZ "have been known to be involved in various nasty businesses".

"We've noticed them in connection with Zeus, a toolkit written and sold by a Russian software engineer, which enables people to do keylogging to grab PayPal, eBay and online banking passwords," he said. More...

05-17-2010 23:10

Zeus banking virus is back warns security firm

eus, a virus that steals online banking details from infected computer users, is more powerful than ever, warns a web security company.

Trusteer says it has spotted the Trojan virus in one of every 3,000 of the 5.5m computers it monitors in the US and UK.

Zeus 1.6 can infect people using Firefox and Internet Explorer web browsers, the company claims. The malware steals login information by recording keystrokes when the infected user is on a list of target websites.

These websites are usually banks and other financial institutions.

The user's data is then sent to a remote server to be used and sold on by cyber-criminals.

"We expect this new version of Zeus to significantly increase fraud losses, since nearly 30% of internet users bank online with Firefox and the infection is growing faster than we have ever seen before," said Amit Klein, chief technology officer at Trusteer. More...

04-21-2010 18:58

Shadow cyber spy network revealed

A "complex cyber-espionage" network that penetrated various organisations including the Office of the Dalai Lama, has been uncovered by researchers.

The shadow network targeted government, business, and academic computers at the United Nations and the Embassy of Pakistan in the US, among others.

It was used to steal at least 1,500 emails from the Office of the Dalai Lama, the researchers said. The attacks were thought to originate in the city of Chengdu in China. More...

04-12-2010 16:40