Zeus variant targets users of China's biggest Bitcoin exchange

Share this article:

A variant of the Zeus P2P/Gameover trojan has been identified that will allow an attacker to take over the account of anyone using China's biggest Bitcoin platform, BTC China.

The malware begins working when an infected user attempts to log into the BTC China website, Etay Maor, fraud prevention solutions manager at Trusteer, wrote in a blog post, adding that when this occurs, the victim's username and password is stolen and the session is paused briefly.

The reason for suspending the session is because the attacker may need a one-time password, Maor said, explaining the malware will use simple social engineering techniques, combined with HTML injection, to request it.

“Once the cybercriminal has the victim's credentials he can easily perform an account takeover and assume control of the Bitcoins associated with the account,” Maor wrote.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

More in News

LEADS Act addresses gov't procedure for requesting data stored abroad

LEADS Act addresses gov't procedure for requesting data ...

Senators introduced the legislation last week as a means of amending the Electronic Communications Privacy Act (ECPA).

Report: Intrustion prevention systems made a comeback in 2013

Report: Intrustion prevention systems made a comeback in ...

A new report indicates that intrusion prevention systems grew 4.2 percent in 2013, with growth predicted to continue.

Mobile device security sacrificed for productivity, study says

Mobile device security sacrificed for productivity, study says

A Ponemon Institute study, sponsored by Raytheon, revealed that employees increasingly use mobile devices for work but cut corners and circumvent security.