Terdot Banking Trojan Could Act as Cyber-Espionage Tool

itman · Nov 16, 2017

The Terdot banking Trojan packs information-stealing capabilities that could easily turn it into a cyber-espionage tool, Bitdefender says in a new report.

Highly customized and sophisticated, Terdot is based on the source code of ZeuS, which leaked online in 2011. The banking Trojan resurfaced in October last year and Bitdefender has been tracking its whereabouts ever since, the security company notes in a technical paper https://www.bitdefender.com/files/News/CaseStudies/study/180/Bitdefender-Whitepaper-TERDOT-crea2079-A4-en-EN-print.pdf.

Terdot was designed to operate as a proxy to perform man-in-the-middle (MitM) attacks, as well as to steal browser information such as login credentials or the stored credit card data. Furthermore, the malware is capable of injecting HTML code into visited web pages.

The malware relies more on legitimate applications for its nefarious purposes, including certificate injection tools, than on in-house developed software.

Although designed as a banking Trojan, Terdot’s capabilities go well beyond its primary purpose, Bitdefender notes. The threat can eavesdrop and modify traffic on social media and email platforms, and also packs automatic update features that allow it to download and execute any file provided by the operator.
Click to expand...

http://www.securityweek.com/terdot-banking-trojan-could-act-cyber-espionage-tool

Rasheed187 · Nov 18, 2017

What I don't like about the report by Bitdefender, is that they don't tell anything about how their behavior blocker is capable of tackling this malware. Or perhaps it's not possible to tackle this malware. And it's also not possible to copy text within this PDF document.

itman · Nov 20, 2017

Terdot Banking Trojan Grows Into a Sophisticated Threat

A banking trojan first observed in October 2016 has grown into a sophisticated hacking tool that works primarily as a banking trojan, but could also be used as an infostealer or backdoor.

Named Terdot, this new malware is not a widespread threat, just yet. For now, the banking trojan has been seen targeting the customers of Canadian banks, distributed via the Sundown exploit kit and through spam email.

While the Sundown exploit kit has been the primary method of distribution, the emails, in particular, are quite strange, as they only depict an image of a PDF icon. If users click this image, this triggers malicious JavaScript code that downloads and runs the Terdot malware.
Click to expand...

https://www.bleepingcomputer.com/ne...ing-trojan-grows-into-a-sophisticated-threat/

Log in or Sign up

Terdot Banking Trojan Could Act as Cyber-Espionage Tool

itman Registered Member

Rasheed187 Registered Member

itman Registered Member

Log in or Sign up

Terdot Banking Trojan Could Act as Cyber-Espionage Tool

itman Registered Member

Rasheed187 Registered Member

itman Registered Member

Useful Searches