In Facebook detected a Trojan that steals financial data users

This malicious program is installed on the device, and then runs in the background.

According to the Daily Mail, the experts on information security failed to detect a new malicious program that spreads through the social network Facebook. This Trojan steals financial data of users.

According to experts, the malicious program is installed on the device after the user is on a malicious link. Next, the Trojan runs in the background. To date, the IS experts argue that all references have been removed.

After installation, the virus begins to track user activity and intercept any data entered into online banking, online stores, etc. The information collected is redirected to malicious users, who are able to illegally withdraw funds from the accounts of their victims.

Malicious software attacks networks of companies every three minutes

The company FireEye published studies, according to which networks the majority of commercial structures every three minutes under attack of malicious programs.

In this case, according to FireEye, networks of most companies working in the field of high technology, have been attacked by malicious programs every minute. Eksperty FireEye note that the most common method of introducing malware is targeted (directed) phishing.

The results of studies presented in the 2H 2012 Advanced Threat Report, suggests that in order to get potential victims to launch malware, cybercriminals often use ordinary business terminology, such as "UPS". In this case, 92% of malware attached to e-mails in a ZIP archive. In the study, experts from FireEye also consider methods that allow attackers to introduce malware into networks of victims and avoid detection by their defense. In particular, are malicious programs which are activated only when moving the mouse.

FireEye experts also point out that to date, the creators of malicious spared no effort trying to create malware that can bypass any existing security system, which, moreover, are often morally and technically outdated.

Given all of the above, We advise commercial entities and other organizations in a timely manner to carry out upgrades to protect corporate networks and strategies for their protection.

Link:
http://www.fireeye.com/news-events/press-releases/read/advanced-cyber-attacks-occur-up-to-once-every-three-minutes

New stage in the development of bootkits

In the last few years has increased the spread of malicious software (bootkits), modifying the boot sector in the infected system. Among the most prominent members - TDL4, Olmasco and Rovnix.

In a ESET report on threats and trends for 2012, was stated that bootkits are one of the key technical trends of the year.

In the last few years has increased the spread of malicious software (bootkits), modifying the boot sector in the infected system. Among the most prominent members - TDL4, Olmasco and Rovnix.

Each of them uses different methods of infecting your hard drive, or a modification of the master boot record (MBR), or a modification of the first sector of the boot partition, that is, VBR or IPL (first volume sector, which control is transferred out of MBR - Volume Boot Record / Initial Program Loader). Intuitively, these families are shown in the figure below.