"High Roller" Hacker Attack is Stealing Hundreds of Millions From the Rich
June 26, 2012 3:13 PM
comment(s) - last by
Attack is an extension of the man-in-the-browser attack methodology
Security researchers admit they're still struggling to defeat man-in-the-browser (MitB) attacks. The best-known example of this attack is the Zeus (
, etc.) botnet, which is comprised of machines infected by drive-by-download or phishing attacks.
Researchers are currently only 23 percent effective at detecting and removing Zeus variants, although
attacks on command and control servers
have been somewhat effective. The malware operates via a browser extension in Firefox or via a Browser Helper Object in Microsoft Corp.'s (
) Internet Explorer. The Trojan is used to carry out traditional malware activities, such as spamming and bank transaction interception/modification.
I. Hackers Steal From the Rich, Give to Themselves With Op. High Roller
Now even as researchers continue to struggle with Zeus and
its successor SpyEye
, there's an even more sinister malware storm brewing that Guardian Analytics and Intel Corp. (
) subsidiary McAfee
have been tracking
[PDF], dubbed "Operation High Roller".
The new attack is much more organized, driven via cloud controllers, versus Zeus where infected machines often operated in a rogue lone manner.
Using cloud servers, machines infected with High Roller Trojans are hit with server-based fraudulent bank transactions totaling up to $130,000 USD (€100,000). These very large transactions are ferried through "mule" accounts also operated by the control-servers. The attacks use Zeus or SpyEye for reconnaissance and then use compromised local machines to target large accounts via
"spear phishing" tactics
An example "spear phishing" message from an infected machine. [Image Source: McAfee]
The new multi-approach malware is able to circumvent typical "chip and pin" physical security features, such as the smartcard reader ID systems commonly used in Europe. It targets primarily "high rollers" -- accounts with more than €250,000, the kind commonly maintained by wealthy individuals and corporations. This differs from Zeus and other past attacks that primarily targeted the masses with smaller transactions
Op. high roller is stealing millions from the wealthy [Image Source: The Hibernia Times]
II. Sophisticated Cloud-Commanded Malware Hits U.S.
The attacks initially targeted Europe, but have since spread to the U.S. and Columbia. The hardest hit region in Europe, according to McAfee is the Netherlands, which suffered over €141M ($175M USD). However attacks in the U.S. are also escalating with 8 to 10 malware variants currently attacking 109 businesses.
Texas is the state currently being hardest hit by the attacks. Numerous account holders in New York, Georgia, and California were also targeted.
Many states have been hit by Operation High Roller. [Image Source: McAfee]
Most of the attacks originated from command-and-control servers than Russia, though some C&C servers were also found in China and the U.S., among other places.
This article is over a month old, voting and posting comments is disabled
RE: Well if the rich are being targeted
6/27/2012 2:37:48 PM
Something like 10% of all workers in the U.S. are employed by a government agency of some sort. You think that is understaffed? When you add in contractors that are primarily supported by the government it shoots up closer to 20%. When you add in people receiving welfare you are now around 25% of working Americans that are directly funded by the government. What percentage do you think should work for the government? 30%? 40%? And you want to tax the rest of the workers to pay for those employees? And you wonder why people think differently than you?
"So, I think the same thing of the music industry. They can't say that they're losing money, you know what I'm saying. They just probably don't have the same surplus that they had." -- Wu-Tang Clan founder RZA
Malware Focusing on Macs, Mobile Devices Increasing
May 24, 2012, 9:18 AM
Wrath of the Titans: Microsoft, U.S. Feds Slay Godly "Zeus" Botnets
March 26, 2012, 3:21 PM
China Appears to Have Committed "Unprecedented" Cyber-Attack on Canada
February 17, 2011, 10:32 AM
Kneber Botnet May Have Infected 75,000 PCs Globally
February 18, 2010, 10:44 AM
Facebook Will Force Android, iOS Users to Use Messenger App This Week
July 29, 2014, 11:26 AM
Amazon Launches 3D Printing Store
July 28, 2014, 1:00 PM
Google to Announce $1 Billion Twitch Purchase
July 25, 2014, 12:33 PM
Quick Note: European Central Bank Hacked, Personal Information Stolen
July 24, 2014, 5:20 PM
EU Privacy Watchdogs Meet with Google Over "Right to be Forgotten" Requests
July 24, 2014, 12:29 PM
Report: New UK Broadband Users Give Porn Filters the Shaft
July 23, 2014, 11:49 AM
Most Popular Articles
Kindle Fire Phone Review Roundup -- A Solid "Meh"
July 23, 2014, 2:09 PM
Ford Details ’15 F-150’s 325hp, 2.7L EcoBoost V6; Demonstrates 732-lb Weight Loss
July 22, 2014, 6:55 PM
Windows 9 Will Merge Windows, Windows Phone, Windows RT in 2015
July 23, 2014, 3:33 PM
Comcast Memo: Harassing Customers During Retention Calls Actually IS Our Policy
July 22, 2014, 5:19 PM
Sony's Xperia Z3 Gets Detailed in Leaked Photos
July 25, 2014, 2:30 PM
Latest Blog Posts
Space Terrorism is a Looming Threat For the United States
Apr 23, 2014, 7:47 PM
Facebook Aims to Provide Internet to "Every Person in the World" with Drones, Satellites
Apr 1, 2014, 10:20 AM
Retail Mobile Sites Experience Outages in Light of Simplexity's Bankruptcy
Mar 14, 2014, 8:48 AM
Tesla vs. BMW: Who Has the Safer EV?
Feb 1, 2014, 2:56 PM
Justice Leaks Details of Next HTC One Two Flagship Phone
Dec 5, 2013, 4:04 PM
More Blog Posts
Copyright 2014 DailyTech LLC. -
Terms, Conditions & Privacy Information