FBI And Europol Disrupt Botnet Digital Bank Robbers

The FBI, the British National Crime Agency (NCA) and Europol are working to disrupt a botnet that criminals use to steal 30 million online bank accounts. It involves the Dridex-malware, where the US government yesterday for warned.

Through the malware managed to infect criminals in Moldova and other countries, computers and then steal data for Internet banking. In this way could then money from online accounts are stolen. One of the managers of the Dridex botnet has now sued. It is a 30 year old man from Moldova who in late August was arrested in Cyprus.

The various investigative agencies are now working for the malware to 'sink holes' so that the criminals behind the botnet can no longer control the infected computers. This involves a continuous campaign directed against different versions of Dridex and the criminals behind it, says Europol.

US Warns Of Malware That Steals Money From Bills

Internet users should beware of a malware family that can steal money from bank accounts and computers can use for DDoS attacks, so let's Computer Emergency Readiness Team of the US Government (US-CERT), the Ministry of Justice and the FBI in a warning know.

Although Dridex-malware for more than one year exists, the government decided today to internet users for this threat warning. To infect computers with Dridex are mainly used e-mail attachments with Word documents. The e-mails look legitimate, and try to let the user open the attachment. In reality, the Word document containing a malicious macro. Once the macro is activated Dridex which will install on the system.

Macros are disabled by default in Word and users must also enable it manually. In spite of this extra step Dridex is successful. In case of a successful infection, the authorities recommend using a virus, change passwords and apply special remove programs. It is also advised to keep windows and installed applications up-to-date.

G Data: Windows User Must Install Optional UAC Patch

Windows users would be wise to install an optional update for Windows, other malware can use a trick to get unnoticed administrator rights on the computer, so advises the German anti-virus company G Data.Following the spread of the Dridex malware.

This is a Trojan horse that recently in Belgium for major damage caused by the banking system to attack the Belgian companies use. The malware spreads via e-mail and MHTML document. This document contains a macro that attempts to download a "downloader". The downloader will place the final malware on the system. If the user macros enable the downloader is downloaded in Microsoft Office. To get administrative rights on the computer downloader tries to bypass the UAC window.

Windows User Account Control (UAC) is a security measure designed to protect computers from Microsoft as "hackers and malicious software." As software or a user wants to change some Windows settings or try to perform actions that require administrative privileges displays a UAC warning. The downloader adjusts according to G Data to a popular trick to hide the UAC warning. It uses a customized file SDB . In this case, Windows will not show because UAC window.

Microsoft has released a patch developed that allows the UAC warning is also shown in this case, but this is an optional update. "The malware creators abuse a weakness in Microsoft's operating system to be without displaying the UAC notification system. Therefore, we strongly recommend to install the Microsoft patch, Microsoft even designates it as a required patch," the German anti-virus company. In addition, users advised to not open email attachments from unknown senders and no macros enable foreign documents.