New malware helps attackers bypass two-factor authentication
In addition to stealing login credentials of online banking users, Ice IX steals their phone numbers to compromise accounts.
Banktech India News Network, 2/6/2012 11:39:32 PM
Researchers have identified a new Zeus variant named Ice IX
which not only targets the login IDs and passwords of online
banking users but also their telephone numbers.
According to researchers at the US based computer security firm
Trusteer, Ice IX is a modified variant of the Zeus financial
malware platform which in addition to stealing bank account data,
also tries to capture information on telephone accounts belonging
to the victims. This allows attackers to divert verification calls
from the bank intended for the customer and bypass two-factor
authentication.
“We believe the fraudsters are executing fraudulent
transactions using the stolen credentials and redirecting the
bank’s post-transaction verification phone calls to
professional criminal caller services that approve the
transactions,” said Amit Klein of Trusteer in a blog
posting.
The malware, so far, has been found targeting online users in
the United States and United Kingdom only.
Israel’s sixth-largest bank boosts level of information security
Union Bank, the sixth largest bank in Israel, wanted a security information and event management system that could manage events down to the hardware level
Keep yourself updated on latest news and articles from the BFSI segment