Trojan and the Gaussian method

[Детективное агентство ИКС-Инфо.]

Kaspersky Lab has published a report on a detected malicious program, the victims of which were customers of large banks in the Middle East, as well as the PayPal payment system.

Specialists from Kaspersky Lab discovered another Trojan in the Middle East, classified as a cyber weapon. The main feature of the detected Trojan is that in addition to espionage it is also aimed at stealing financial information. Researchers consider the detected trojan an ideal tool for financial crimes: it can steal bank card numbers, passwords for Internet banking systems and transaction data.
This trojan was named “Gauss”, after the German mathematician Johann Karl Friedrich Gauss. It was first discovered in June of this year, and as the study showed, the first cases of infection with it date back to September 2011.
“It has a special module that focuses on targeted theft of access accounts for Lebanese banks' banking systems.” Lebanese banks are unique in that they do not disclose information about their customers to anyone, that is, in fact, they are a kind of Swiss bank analogue. “And indeed, a lot of dubious organizations apparently use these banks to store their money,” Vesti quotes Alexander Gostev, the main antivirus expert at Kaspersky Lab.
In total, the malware installs up to eight separate modules on the target machine. Numerous modules Gauss secretly sends to the management server passwords entered or stored in the browser, cookies (i.e. the history of visited sites), as well as details of the configuration of the infected system. In addition, the creators of this trojan received detailed information about the infected computer, including details about network interfaces, disk drives, and also BIOS data. The remaining modules monitor the activity of the virus, and are also responsible for installing other malicious programs whose purpose is currently unknown. After the trojan did its job on the computer, it self-destructed.
Experts are sure that the presence of the banking Trojan functionality in Gauss is a unique case, which had never before been encountered among malicious programs that are commonly classified as cyber weapons. Its detection was made possible due to the presence in it of a number of features that combine this trojan with “Flame”, another recently discovered trojan. Kaspersky Lab experts have found similarities in architecture, modular structure, and methods of communicating with management servers.
Alexander Gostev believes that Gauss was created with the support of state structures: “Undoubtedly, there is some government behind this thing, some state of the world that creates such threats. The fact is that we do not have clear evidence of any state’s involvement "We have, again, speculations, assumptions, but since we do not have these clear facts, we, unfortunately, cannot blame any particular state for creating such threats." But Gauss was created in the same factory as Flame. This indicates that, most likely, it is part of the operation, which is sponsored by a particular state. "
And this is the fourth trojan behind which, as is reasonably suspected, state structures stand!
https://iks-info.blogspot.com/2012/08/blog-post_17.html

 

[Частный детектив Донецк]

Again, Kaspersky got into a puddle))) and again the promotion - take Kaspersky - it will protect you from all infections))
Market .. what to do))

 

[частный детектив. Узбекистан. Ташкент.]

Interesting post! Thanks!