Malware by traditional mail

No ratings

Presented at ToorCon 2012 by

This presentation describes one case happened the fall of 2011 in Russia. But this could happen in any other country and it can happen in the future. It is long time an open secret that the attackers create malicious programs not just for fun but for the enrichment. In this regard, users of DBS is one of the most attractive target for cybercriminals. Despite the same goal - to get the money of users authors have created malicious software go different ways. Some go through the development of new technological methods to overcome the defense and looking for new vulnerabilities in software, but there are those who use social engineering techniques that give not less effective results in attacks on banking users. In October 2011, customers of several major banks of Russia received in the mail envelopes that contained a CD with software and instructions for use. Information about this incident was published on the Internet. But in this presentation are disclosed technical details of the attack, describes the contents of CD.