Local banks scammed by PM scare

Trojan can track user locations

The Commonwealth Bank and Westpac account holders have become victims of a phishing scam in which malicious code reveals the physical location of affected IP addresses using Google Maps.

The software installs a trojan capable of keylogging user activity, hijacking infected computers.

The scam was circulated as a false news report claiming the Prime Minister suffered a heart attack. It installs a trojan and backdoor code to capture all user input as well as compromising a Web server to allow the hacker to hijack the victims' computer.

The hacker is then provided with details on the number of infected machines in each country, while the Google Maps server is used to translate IP information to pinpoint the machines' physical location.

Websense Australia and New Zealand country manager Joel Camissar believes hackers could potentially use Google Maps to assist in identity theft.

"The hackers could correlate user information acquired from the keylogger with knowledge of where a user is located from Google Maps to masquerade as them," Camissar said.

"With this they could access bank accounts and social security numbers."

Camissar said there are around 750 infected desktops in Australia, which represents 30 percent of 2500 globally.

Westpac and the Commonwealth Bank were among those specifically targeted in Australia, while the Bank of America, and Germany's Deutsche Bank were also attacked.

A Commonwealth Bank spokesperson confirmed the bank's Web site has not been laced with malicious code targeting bankers.

"The Commonwealth Bank can confirm that its Web site has not been infected with the Trojan linked to the phishing e-mail that claims the PM has suffered a heart attack," the spokesperson said.

Westpac was unavailable for comment.

Sophos senior technology consultant Graham Cluley said users are directed to a 404 error page which downloads the code.

"Recipients of the e-mail are encouraged to click on a link to obtain the latest information on Howard's health; however, this link takes users to a Web page which downloads malicious code to their PC, and then displays the real '404 page not found' error page," Cluely said.

"The scammers have registered several domain names that appear to be associated with a newspaper, and have gone to great effort to make people think that they really are visiting the genuine site by pointing to a real error page." "Everyone should be on their guard against this kind of e-mail con-trick, or risk having their PC infected."

Camissar was unsure whether Websense acquired the information through sample code provided by AusCERT or by accessing the hackers' servers.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Darren Pauli

Computerworld
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?