G DATA Malware Report July - December 2013
G DATA’s Malware Report H2 2013 includes the most important statistics and information regarding new malware types, websites’ threat potential as well as botnet and banking Trojan activities. Check out the essential facts.
Dubious casino tips being distributed via spam email
In the last few hours, many people have been receiving minimalistic – presumably spam – emails that unsettle the recipients. The text field contains just a URL – no salutation, no other text. If curious recipients click on the link, they will land on a promotional web page for online casinos.
Spam campaign still spreading: banking Trojan Bebloh circulated as email attachment
Another banking Trojan is now being distributed as part of the currently observed spam campaign: Bebloh. This is known for being sent as an email attachment – precisely as it is in the latest instance. It is possible that copycats have jumped onto the first scam, as experts at G DATA SecurityLabs…
Cyberactivists use elaborate scheme to spread possibly unwanted browser extension
The activists’ campaign started only a few days after Prime Minister Recep Tayyip Erdogan was cited to have said “We’ll eradicate Twitter […] I don’t care what the international community says.” [http://time.com/32339/turkey-erdogan-twitter/] All due respect for the motivation to overcome…
Attackers misuse the good reputation of AV companies to spread malware
Experts at G Data SecurityLabs have been made aware of a nasty scam that attackers are currently using to spread specific variants of the ZeuS banking Trojan. Fake invoices with an infected attachment claim to have been scanned for malware and rated as harmless by G Data or Sophos – which is a…
If misused, legitimate tool phishes for Windows credentials
Windows user credentials are a valuable good, especially when it comes to attacking a company: Sneaking onto the computer of an employee is one thing, but being able to impersonate this employee and to use all his/her permissions within the company network is another, an even higher, threat level! A…
Password protected does not necessarily mean secured
More than 10 years ago, email worms like Bagle started spreading themselves in password protected archives, e.g.ZIP archives. The password needed to unlock the archive was mentioned as part of the email. A scam that has rarely been seen since and that is considered being an old trick has now…
Android Malware goes "To The Moon!"
The latest case involves a manipulated copy of a popular radio application. The original app has already been downloaded millions of times from the Google Play Store. Attackers are aiming to exploit this popularity to distribute their own app as much as possible. They have begun circulating a…
Worth looking again: fake Flash Player apps in Google Play store
At the weekend, a number of fraudulent apps pretending to be Adobe Flash Player appeared on the official Google Play store. Of the three apps we looked at, all demanded payment from the user before installation and one even spied on the user in the background. Google reacted fast and deleted the…
Cridex banking Trojan on the rise
In recent weeks G Data SecurityLabs has been observing a widespread spam campaign that is mainly targeting German Internet users. In two major waves so far, the names of four globally renowned companies have been misused as decoys to infect users with the Cridex banking Trojan. The attackers are…
Karsten Hahn
Principal Malware Researcher
Tim Berghoff
Security Evangelist
