Information Security Blog

LinkedIn With A Jolt of ZeuS

0 Flares

I recently shared an article with information on the new LinkedIn phishing emails going around the internet. The article, “LinkedIn Phishing – Time for a Social Engineering Penetration Test?” contains detailed screenshots on how to identify such an email.

Now, only a short time later, the malicious email been unwrapped. Mickey Boodaei, Trusteer CEO, states:

“The fraudulent LinkedIn messages take users to a salesforceappi.com domain. Despite the name, the domain has nothing to do with Salesforce.com. It was registered May 31, and the server associated with the IP address is based in Russia.”

Once clicking the link, the user is brought to a website which downloads a ZeuS trojan to their computer. What is ZeuS malware you ask? ZeuS is a Trojan kit designed to generate a binary that installs a suite of data theft tools on a victim’s system. ZeuS is most often spread via drive-by downloads or phishing attacks. When infected, ZeuS has the ability for:

Keystroke logging
Taking screen shots to capture login data
Modify web page content on-the-fly to hide
Transmits collected data to the attacker’s servers
Generate SPAM

In addition, ZeuS has the ability to bankrupt companies. This malware is no joke. Lastly, we have also blogged extensively on ZeuS. The articles can be found on our Techno Blog, Risky Business Blog and Simplified Blog.

So with that said, my advice is to look at emails before you click on a link.

Scott

9
JUN

Free Whitepaper: Five Best Practices for SIEM

The promise of SIEM is the consolidation of all relevant Security Event Logs from disparate sources into a single unified and normalized data store.

Simplify compliance monitoring/reporting
Vastly improve Incident Detection & Incident Response
Contextualize event information with other business relevant information

Is ISO 27001 Right for (Y)our Organization?

Thinking about ISO 27001 Certification? View our free On-Demand ISO 27001 Webinar

How to deal with increasing threats
How to manage multiple regulatory requirements
How to handle client requests for attestation
To validate that significant changes did not have unanticipated results

Free Whitepaper: Stop Wasting Money on Penetration Testing

Penetration Testing is most frequently performed to:

Substantiate the net effectiveness of a mature control environment
Prove to a third party that an environment is secure/trustworthy
Quickly assess the security of a less mature control environment (in a sense a technical risk assessment)
To validate that significant changes did not have unanticipated results

Free Download: ISO 27001 Implementation Roadmap

Have no fear – our “roadmap” will guide you, step by step, through the entire ISO 27001 process.

Getting to ISO 27001 certification is a process made up of things you already know – and things you may already be doing!

Free Download: A Best Practices Guide to Database Security

Because data is only as secure as the systems & processes it relies on – a holistic approach to data security is essential. This roadmap is not meant to be exhaustive but rather to stimulate the necessary thought process to put you on the path to good data security.

Best Practices for Firing A Network Security Administrator

Want to know how to fire a Network Admin? Need to know what precautions to take? Firing any employee can be a stressful event. Firing one who has significant knowledge of and privileged access to your Information Technology/Security infrastructure is even more stressful, as the risks are so notable.