ZeuS Trojan attempts to exploit MasterCard, Visa security programs

Do you familiar with ZeuS Trojan? If you are not sure, let me explain to you what is meant by ZeuS Trojan and how it exploit MasterCard, Visa secu rityprograms. The ZeuS Trojan has capability to steal financial information and execute unauthorized fund transfers. It has recently been seen attacking banking customers on infected machines by displaying a fake “Verified by Visa” enrollmen screen or its MasterCard counterpart SecureCode. ZeuS Trojan trying to lure victims into fraudulent online enrolment action that would end up giving criminals their sensitive financial data.

The real and legitimate Visa and MasterCard card-fraud prevention programs have cardholders use a password when making card based purchases online as an additional means of security. The remotely controlled ZeuS botnet, used by criminal organizations, waits for the victim to log onto a list of targeted banks or financial institutions and uses various ruses to steal credentials or execute unauthorized fund transfers. This newer attack is designed to trick banking customers into giving over their personal identification numbers, Social security number, credit and debit card number with expiration date.

Visa describes its Verified by Visa program as going beyond the already existing fraud detection it provides with “an extra layer of security at the point where you enter credit-card information online. The service helps prevent unauthorized online use before it happens by confirming your identity with an additional password.

As such those who think they have seen these fake Visa and MasterCard screens on their PC should do what they can do to disinfect their machine and contact their bank.

Source:
Ellen Messmer, Network World dated 14th July 2011