Malware targets UK online banking

Online banking details

Two new pieces of malware have been discovered that are intentionally aiming themselves at UK banking customers.

Security company Trusteer found the malicious programs, which are said to "fly under the radar" of anti-virus software to steal online banking logins in order to commit fraud.

Silon.var2 has been found on one in every 500 computers in the UK compared to one in 20,000 in the US and Agent.DBJP was found on one in 5,000 compared to one in 60,000 across the Atlantic.

The company has also discovered two new Zeus botnets aimed at UK consumers, which have only been found on UK machines and only target UK-based banks.

"To help avoid detection and maximise return on their effort, the clever criminals are using UK centric spam lists and compromised websites based in the UK to spread the malware that targets bank customers," said Trusteer.

The company is predicting significant further losses in 2011 from these types of regional malware.

"This indicates a shift in financial criminal activity and requires some special attention from financial organisations," said Mickey Boodaei, chief executive (CEO) of Trusteer.

"Unlike known malware kits such as Zeus, Torpig, and Ambler which simultaneously target hundreds of banks and enterprises around the world and are on the radar of all security vendors, regional financial malware such as Silon.var2 and Agent.DBJP are highly targeted."

He explained the fraud technique further, saying: "In the UK, each campaign would usually focus on three to seven banks and target them for a period of six to nine months. It then morphs and changes the list of targets, using a new more advanced version of the malware."

But the UK is not the only country suffering from this targeted type of threat, with both Germany and South Africa facing similar problems.

Trusteer claimed the best way to tackle the problem was for regional banks to work together and share information in an attempt to identify and deal with future attacks.

Jennifer Scott

Jennifer Scott is a former freelance journalist and currently political reporter for Sky News. She has a varied writing history, having started her career at Dennis Publishing, working in various roles across its business technology titles, including ITPro. Jennifer has specialised in a number of areas over the years and has produced a wealth of content for ITPro, focusing largely on data storage, networking, cloud computing, and telecommunications.

Most recently Jennifer has turned her skills to the political sphere and broadcast journalism, where she has worked for the BBC as a political reporter, before moving to Sky News.