Bitcoin stealing on the rise
Posted by: Timothy Weaver on 12/20/2013 05:03 PM
[
Comments
]
A Zeus P2P/Gameover variant, that Cybercrooks have developed, actively targets BTC China and other Bitcoin exchanges. The malware is designed to steal the passwords of traders in the virtual currency.
A blog post explains that the malware tries to trick the user into supplying a one time password which is needed for successful account takeovers.
“This Gameover variant waits until an infected user attempts to log into the BTC China website. When this occurs, the malware steals the victim’s username and password and suspends the session temporarily. Once the cybercriminal has the victim’s credentials he can easily perform an account takeover and assume control of the Bitcoins associated with the account.”
“The reason for pausing the session is that the cybercriminal may need to ask the victim for their one time password (OTP). To do so, the malware will use simple social engineering techniques, combined with HTML injection, and present the victim with a request for the OTP under the false pretense of a security measure.”
ZeuS variants are commonly used for banking account takeovers and looting.
China recently clamped down on the trading of Bitcoins which has resulted in a reduction in value. At one point, a Bitcoin was valued at $1000, but has dropped to $600 this week.
“This Gameover variant waits until an infected user attempts to log into the BTC China website. When this occurs, the malware steals the victim’s username and password and suspends the session temporarily. Once the cybercriminal has the victim’s credentials he can easily perform an account takeover and assume control of the Bitcoins associated with the account.”
“The reason for pausing the session is that the cybercriminal may need to ask the victim for their one time password (OTP). To do so, the malware will use simple social engineering techniques, combined with HTML injection, and present the victim with a request for the OTP under the false pretense of a security measure.”
ZeuS variants are commonly used for banking account takeovers and looting.
China recently clamped down on the trading of Bitcoins which has resulted in a reduction in value. At one point, a Bitcoin was valued at $1000, but has dropped to $600 this week.
Comments