WRiCK iT » Security http://www.wrick.nl Wed, 04 Apr 2012 16:11:27 +0000 en hourly 1 http://wordpress.org/?v=3.1.3 Ramnit Worm vs Facebook http://www.wrick.nl/2012/01/05/ramnit-worm-vs-facebook/ http://www.wrick.nl/2012/01/05/ramnit-worm-vs-facebook/#comments Thu, 05 Jan 2012 19:21:08 +0000 admin http://www.wrick.nl/?p=4161

The Ramnit Worm has started spreading through Facebook, with low detection rates at the moment.

Some functions of the Ramnit worm include ;

- Stealing Login Info (cookies and FTP).
- Spreading by sending malicious links to friends.
- Downloading other malware (ZeuS, after the leak of the sourcecode)

By combining Ramnit with Zeus the new worm is able to bypass two-factor authentication and transaction signing systems, gain remote access to financial institutions, compromise online banking sessions and penetrate several corporate networks.

Approximately 800,000 machines were infected with Ramnit from September to end of December 2011.

Screenshot of the Ramnit C&C Server

]]> http://www.wrick.nl/2012/01/05/ramnit-worm-vs-facebook/feed/ 0