A banking crime program that is “well hidden” and “invisible” to cyber threat detection systems has disappeared in Latin America, according to technology giant IBM.
Senior threat investigator Itzhak Chimino he says IBM has uncovered a banking trojan called UnregStealer that is targeting Latin American banks while posing as a Chrome extension. According to Chimino, UnregStealer tricks users into installing a trick to change their Secure Sockets Layer (SSL) certificate.
“Depending on how you set up the hostnames and referrals, victims are presented with what appears to be a security alert informing them that their browser needs an SSL certificate update…
…“Confirmation” is completely fictitious, and there is no need for such a browser. It’s a convincing cover story to make the victim more likely to be killed. “
When a user browses the Internet, the malware runs a script that checks if the victim is visiting one of the sites in the target banks, says IBM. If so, the malware steals the cookies of the bank website the victim is visiting. Every time you click and enter information, the malware collects privileged information such as passwords, one-time passwords and account numbers. Once this information is captured, the next step for UnregStealer is determined by the user.
“This Trojan has a real user, who watches every part of the victims live and shoots them manually. This change makes the campaign invisible to sandboxes and detection machines that do not see the amount of money.”
According to Chimino, the UnregStealer banking malware is powerful and can pose a serious threat.
“The observations indicate a user with the ability and motivation to expand the target beyond what this research has confirmed.”
Follow us X, Facebook and Telegram
Don’t Miss Out – Sign up to receive email notifications straight to your inbox
Swimming Daily Hodl Mix
 
Disclaimer: The views expressed in Daily Hodl are not financial advice. Investors should do their due diligence before making any risky investments in Bitcoin, cryptocurrency or digital assets. Please note that your transfers and transactions are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend buying or selling any assets including cryptocurrencies, nor is The Daily Hodl a financial advisor. Please note that The Daily Hodl participates in affiliate marketing.
Image Created: Midjourney
