funsec mailing list archives

Re: New Trojan re-writes online bank statements to cover fraud


From: RandallM <randallm () fidmail com>
Date: Wed, 30 Sep 2009 12:49:22 -0500

On Wed, Sep 30, 2009 at 8:33 AM,  <funsec-request () linuxbox org> wrote:

------------------------------

Message: 8
Date: Wed, 30 Sep 2009 15:53:06 +0300 (EEST)
From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Subject: [funsec] New Trojan re-writes online bank statements to cover
       fraud
To: funsec () linuxbox org
Message-ID:
       <20088652.4216181254315187293.JavaMail.juha-matti.laurio () netti fi>
Content-Type: text/plain; Charset=iso-8859-1; Format=Flowed

"New malware being used by cybercrooks does more than let hackers loot a bank account;
it hides evidence of a victim?s dwindling balance by rewriting online bank statements on the fly, according to a new 
report.

The sophisticated hack uses a Trojan horse program installed on the victim?s machine that alters html coding before 
it?s displayed in the user?s browser,
to either erase evidence of a money transfer transaction entirely from a bank statement, or alter the amount of money 
transfers and balances."
--clip--

More at
http://www.wired.com/threatlevel/2009/09/rogue-bank-statements/

It appears that this is something totally new...

Juha-Matti


Could this also turn in to a new form of "Redirect", that is, alter
the incoming pages to set up to links?



-- 
been great, thanks
a.k.a System

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: