Add to del.icio.us     Digg this

June 29, 2007

In the past two to three days, MIS directors and IT managers in organizations of all sizes have been warned of a wave of Trojans that can seriously harm their infrastructures. The red cautious flag sent from security firm Finjan follows some reports of an alleged $1,000 crime-ware development kit, including a Trojan, being sold to potential hackers.

Yuval Ben-Itzhak, chief technology officer at Finjan said "this trend severely highlights the alarming growth of crime-ware toolkits being sold to would-be hackers these days."

He added "such crime-ware is focusing on stealing sensitive business data and sending it back to criminals' servers over encrypted communication channels like SSL in order to go totally undetected."

Additionally, Finjan's MCRC (Malicious Code Research Center) pointed to the rapid growth of a new PRG Trojan variant, which it believes may have been developed using a similar crime-ware toolkit.

Such malware relays critical data collected during employees' online activity to hacker Web sites using an SSL-encrypted format.

Research done by Don Jackson of managed security firm SecureWorks even suggests that the PRG crime-ware has been modified using a Trojan development kit to listen for hacker commands on a special TCP/IP port.

These commands allow a would-be hacker to gain remote control of a compromised system.

Jackson's analysis of certain log files on the servers storing the stolen information found that the data was coming from corporate computer networks.

Add to del.icio.us     Digg this

Source: Vnunet

Save Internet Security.ca's URL to the list of your favorite web sites in your Web browser by clicking here.

Become an authorized reseller of Proxy Sentinel™ and Firewall Sentinel™. Do like the rest of our authorized resellers and have your clients benefit the important security features of our products and solutions, while increasing your sales at the same time. Click here for all the details.

You can link to the Internet Security web site as much as you like. Read our section on how your company can participate in our reciprocal link exchange program and increase your rankings in the major search engines such as
Google and all the others.