Below is a media alert from Amit Klein, Trusteer's CTO new research on the Sunspot Trojan a new piece of financial malware whose infection rates are similar to SpyEye and Zeus in some regions. There are confirmed fraud losses associated with Sunspot, so the threat is real.
This is a very modern malware platform with sophisticated fraud capabilities. Equally concerning, the detection rate for Sunspot by leading anti-virus programs is painfully low. According to a Virus Total analysis, only nine of 42 anti-virus programs tested, or 21%, currently detect Sunspot. It can carry out man-in-the-browser attacks including web injections, page grabbing, key-logging and screen shooting (which captures screenshots of the mouse vicinity as a user types his/her password on a virtual keyboard).
- NEIL STINCHCOMBE
- InfoSecurity
- Posted On
