Titled:
"A Trojan Horse program that is now infecting hapless computers can add extra data-entry fields so legitimate oline banking sites and trick visitors into giving up band card numbers, PINs, and other vauable data. The Limbo malware insinuates itself into a Web browser using a technique called HTML injection, says Uri Rivner, head of new technologies at RSA Consumer Solutions, a division of EMC. Because it's so closely intergrated with the browser, it can operated while the user is at a genuine bank site and can surreptiitiously change the actual layout of that real site, he says. Nothing tells you that something is wrong here, with one exception: You're being asked to provide some information that you were never asked to give before, Rivner says. If you are convinced that you are communicating with the bank, the fraudsters can get away with anything they like.
Like other malware, Limbo can infiltrate a user's computer through many paths; pop-up messages that ask you to download an (often security-themed fake application, drive-by downloads from hacked web sites that invisibly attack holes in vulnerable and outdated software, and other means.
Fraudsters can buy Limbo via a complex underground market, and it's gettting cheaper: It costs about $350, down from about $1000 a year ago. The big trend here is that it's becoming affordable, " Rivner says. --Stephen Lawson
I would recommend using the On-line scanner found here Secunia: Those seeding campaigns typically employ Web attacks that target outdated browser plug-ins and other vulnerable software. Flash and Realplayer [plug-ins]--those are the big ones. said, Stewart.
The attacks are often successful because it can be hard for users to know when a plug-in is old and susceptible, especially if it's so old as to predate automatic updates. The free Personal Software Inspector (or PSI) from Secunia can make that task easier. It will scan for outdated software and also provide links for you to patches or updated versions.
| Home | How To's | Download's | Pricing and Terms | Repair Services | About PC Solutions | Contact Us |