Tag #e-banking | CERT Polska

29 May 2014 CERT Polska #botnet #e-banking #malware

A look on the VBKlip “battlefield”

On multiple occasions we informed about a new threat to Polish online banking users, which we named VBKlip. This is a new kind of malware that substitutes the bank account number that has been copied to the clipboard. This works when we try to, e.g. pay a bill, and …

23 January 2014 CERT Polska #e-banking #malware #trojan

New .NET banking malware (VBKlip): no network usage, no registry entries and no AV detection

We recently blogged about a new strain of malware called VBKlip. This malware was aimed at Polish online banking users. In the last few days a new, revised version of this malware has resurfaced. This new version is written in .NET and has a few new ideas which seem to …

17 December 2013 CERT Polska #android #e-banking #malware

OTP stealer Android app masquerading as mobile antivirus targets Polish users

The E-Security mobile malware appeared at the beginning of this year. This malware was targeting Polish online banking users, with the goal of stealing One Time Passwords (OTPs) used to confirm banking transactions. The attack was part of a bigger scheme. When the user computer was infected, it displayed an …

31 October 2013 CERT Polska #e-banking #malware

How to identify and remove the VBKlip malware?

In our previous article we described a new VB malware, named VBKlip by us, that was replacing a Bank Account Number that was copied to the Windows clipboard. In order to check whether your computer is infected you have to just simply copy a correct Bank Account Number (e.g …

22 October 2013 CERT Polska #e-banking #malware

New VB malware that changes bank account number when copying from clipboard

At the start of October we started receiving reports of propagation of a new strain of unusual malware. This malware was dedicated for Polish online banking users and implemented a technique new to our market. We received a sample of this malicious software, written in Visual Basic 6. It used …

12 June 2013 CERT Polska #android #botnet #e-banking #malware #trojan

Evolution of an Android malware: the story of a friend of ZitMo

Recently we blogged about a new threat to Polish e-banking users called “E-Security”. When a user, whose machine was infected, tried to access her internet banking site she was greeted with a message that instructed her to install “E-Security Certificate” application on her Android phone. This “certificate” was nothing more …

25 April 2013 CERT Polska #android #botnet #e-banking #malware

The “E-Security” app: a new friend of ZitMo

Recently, we obtained a new Android malware sample, which is targeting Polish e-banking users. The application is called “E-Security” and its filename is e-security.apk . It also has a security-related icon shown on the left. The malware is relatively simple, but effective at achieving its goals. It allows an attacker …