The Internet became significantly more dangerous for business in the past week, as criminals spread not one, but two attacks that used the web as a platform, making web-spread attacks into a mainstream threat.
Last week's Scob attack infected clients that simply viewed certain web sites using Internet Explorer. Infected clients were redirected invisibly to a Russian web site that loaded a backdoor and keystroke logger. (More Scob news here, and here.)
Yesterday saw warnings about Bankhook.A, "a keystroke-logging trojan that typically poses as an image file to gain entrance into PCs to steal banking and financial information," according to an article by CRN writer Dan Neel. Bankhook.A lays in wait until the user accesses the URLs of several dozen banking and financial sites worldwide, and captures keystrokes entered into those sites.
The link for this article located at securitypipeline.com is no longer available.
