Mevade malware starting to make the rounds

Infosec researchers say that there is a new strain of malware making the rounds in the US, Canada, the UK and India.

The malware, called Mevade, is being distributed on the TOR network to hide its authors. It is being used to compromise business services, government, manufacturing, and transport organisations in multiple countries on at least three continents.

The lead security researcher at IT security firm Websense, Jason Hill, says "The malware associated with this particular campaign has been linked to a large spike in TOR traffic indicating that the nefarious parties behind this attack are taking steps in order to secure the anonymity of their command and control (C2) infrastructure as well as themselves."

"In addition," Hill added, "the malware also uses a reverse proxy and communicates over SSL which requires the right technology with the ability to decrypt such encrypted traffic in order to inspect and detect a compromise."

Websense has put together a blog post, complete with maps and charts, documenting the threat in greater depth here.