Call them the Coreflood Gang. A ring of cyber bank robbers from southern Russia has quietly perfected a way to get a beachhead inside company networks.

Once inside, it infects every PC within reach with a custom-made data-stealing program called Coreflood. The goal: go rip off bank accounts online.

by the past 16 months, the Coreflood Gang has infected swaths of PCs inside thousands of companies, hospitals, universities and government agencies, says SecureWorks researcher Joe Stewart, who has tracked and

documented the spread of Coreflood by that period.

“It’s spying on you, capturing your log-ons, user names, passwords, bank balances, contents of your e-mail,” Stewart says. “It can capture anything.”

Coreflood is part of a class of malicious software, called banking trojans, designed primarily to help crooks break into bank accounts online. The number of banking trojans detected on the Web that month topped 24,800, up from 3,342 at the start of […]

Orginal post by Top Tech News