Phishing attacks with Zeus Trojan targeting Outlook Webmail shops

By , Network World |  Security, Outlook, Zeus Trojan

Targeted phishing attacks aimed at getting Outlook Web Access users within enterprise organizations to download a Trojan designed to steal financial and account information is spreading fast.

"It started yesterday, with more than 50 customers of ours receiving this e-mail and we've been targeted ourselves," says Mickey Boodaei, CEO of security firm Trusteer.

The e-mail-based attack is customized to fool employees in each enterprise it's sent to, with the "from" address appearing to come from within the enterprise, asking the recipient on behalf of the systems administrator to modify their e-mail settings for Outlook Webmail as a result of an upgrade.

[ Also on Networkworld.com: Trojan attacks up, phishing attacks down ]

Though the link appears to be to the enterprise Outlook Web Access site, it's actually a Web site in Chile, Columbia, Romania or Russia that's craftily trying to get the victim to download a file that's the dangerous Zeus/Zbot Trojan, says Boodaei.

The Zeus Trojan is well-known—it's part of the fake IRS web site e-mail scam sweeping into mailboxes at present.

Using an isolated computer, Trusteer downloaded the Zeus Trojan to see how it would work in the case of these phishing messages and found the attack involves keeping track of what everyone who receives it might do. "It even sends a follow-up e-mail that says "you didn't complete the process,'" Boodaei notes. Trusteer points out that warding off this type of attack against employees entails educating them about phishing and blocking download of executable and zip files from the Web.

Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+

Answers - Powered by ITworld

ITworld Answers helps you solve problems and share expertise. Ask a question or take a crack at answering the new questions below.

Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+

Ask a Question
randomness