Bekker's Blog

Blog archive

A Scary Tale About Coreflood

If you bank online, check out the story about a security briefing this week on the Coreflood Trojan.

Researcher Joe Stewart of SecureWorks Inc. got access to a command and control server used to collect data from a botnet deployed by a Russian crime group.

Stewart shared some statistics at the Black Hat security conference in Las Vegas. Among the findings: 8,485 compromised bank accounts, 3,233 credit card accounts and more -- all collected in six months.

Here's the scary part. Coreflood is an older, well-known Trojan, but it's still doing massive damage. "In the case of Coreflood, you've got people infected who didn't do anything wrong," Stewart said. So users didn't necessarily visit suspect Web sites, let their anti-virus lapse or commit other computing no-nos.

Do you feel like current best practices in the industry are enough to protect your customers? Let me know at sbekker@rcpmag.com.

Posted by Scott Bekker on August 07, 2008 at 11:58 AM


Featured

  • The 2019 Microsoft Product Roadmap

    From the next major update to Windows 10 to the next generation of HoloLens, here's what's on tap from Microsoft this year.

  • 2019 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss this year.

  • New Features Added to Microsoft 365 Business Subscriptions

    Microsoft's productivity and collaboration plan for businesses with fewer than 300 users is getting two new features: conditional access security and trouble-ticket tools for administrators.

  • Microsoft Details 'Wave 2' Release Roadmap for Dynamics 365

    Microsoft this week announced its "Wave 2" product release plans for its Dynamics 365 enterprise resource planning solutions, as well as its Power Platform.