Bebloh – a well-known banking Trojan with noteworthy innovations
The banking Trojan Bebloh has been known about and studied for a number of years. But even new developments in the malware have not produced any notable innovations – until recently. The observed infection rates with Bebloh in the first half of 2013 were comparatively small – with a share of just…
Banking Trojans disguise attack targets in the Cloud
Cloud-Technologies are popular and widely spread – whether for storage of data, rented computational power or as part of protection technologies. Also cybercriminals discover the practical approach. Experts from G Data SecurityLabs spotted a new trend: Attacks by information stealers, a kind of…
A new bot on the market: Beta Bot
In the beginning of March 2013, a new bot called “Beta Bot” entered the market. With less than €500, Beta Bot is sold relatively cheap, considering its vast feature list. Even though most of those features are pretty standard for today's bots, like different DOS-attack methods, remote connection…
Android malware infects Windows PCs with spy bot!
The development of Android malware recently reached a new milestone. Android malware Android.Backdoor.Ssucl.A can use some Android mobile devices to attack Windows PCs as soon as the infected mobile device is connected to the PC via USB cable. It also uses a number of remotely controlled functions…
The AVAR Conference 2012 in Hangzhou, China
This week, the AVAR Conference is taking place in Hangzhou, China. G Data is attending the conference to participate in many of the organized events. Several pre-meetings, like the AVPD (Anti-Virus Product Developer) and the WildList meeting, already took place. All discussions and efforts will…
Curiosity can have dire consequences on the Internet!
For some days, G Data Security Labs have been observing a campaign on Facebook that is trying to infect as many Facebook users as possible with malware. Messages that contain nothing but a hyperlink to file hosting service Sendspace are sent to the users' contacts.
Botnet command server hidden in Tor
The G Data SecurityLabs recently identified a malware sample that takes the next step in Command-and-Control (short: C&C) communication evolution, regarding C&C traffic obfuscation. The botnet owners placed their C&C server, which uses the common IRC protocol, as a hidden service inside…
Update: DNSChanger - it's not over yet
If the infected machines are not cleaned up, their users will experience a sudden disruption of services on 9 July 2012!
Three important AV industry events in a row
The month May has always been dedicated to several traditionally important security industry events of the year. G Data is always present at these events and was playing a very important role this time.
The current case „DNSChanger“ – what computer users can do now
What happened so far? The successful undertaking of the so called ”Operation Ghost Click“, carried out by the FBI and other international law enforcement entities, was celebrated in the media – the criminal masterminds were put behind bars and the rogue DNS servers were taken over by the FBI. The…
Karsten Hahn
Virus Analyst
Tim Berghoff
Security Evangelist
