’Silence’ a new strain of malware made by Hacker group Carbanak has been attacking several banking institutions in Russia to spy on victims’ online activity.
‘Silence’ hackers perform cyber-heist with the stealthy new Trojan. Banks all around the world are issuing warnings and alerts for the Trojan, but although the hack was discovered in September, the campaign is still ongoing.”
The new strain of banking Trojan dubbed ‘Silence’ is being spread by a Russian cybercriminal group known as “Silence,” according to reports this group is like the Carbanak hacker group. The Trojan has been attacking at least 10 financial Russian institutions.
‘Silence’ is using tactics like the Carbanak cybercriminal gang, said a representative from Kaspersky Lab on Wednesday (1 November). Kaspersky reports showed the malware campaign is still running ever since September.
Russian, Armenian, and Malaysian based targets were the most affected. Experts are saying the new Trojan ‘Silence’ sends emails laced with malware.
Kaspersky’s report reveals most affected victims were Russian banks but stated more would be coming under Silence’s radar. Yet, the report released by the firm was not showing how much the hackers have hijacked so far.
Cybercriminals were sending trapped emails from the addresses of real bank employees so the chance of success would be higher. Once open, the malware will download a payload into the infected machine. This would send the infected computer’s ID to the hackers and execute the Trojan.
The process is successful, now the hackers await. Hackers are monitoring the bank’s network and examine daily activity. Same as a predator, they lie waiting until the time is right and steal the money. The malware has not shown the ability to take screenshots or videos, which could expose daily routines and banking credentials.
Security Expert at Kaspersky, Sergey Lozhking was saying, “The Silence Trojan is a fresh example of cybercriminals shifting from attacks on users to direct attacks on banks.”
“The most worrying thing here is that due to their in-the-shadow approach, these attacks may succeed regardless of the peculiarities of each bank’s security architecture.” He further added the trend for these attacks was growing.
Kaspersky released evidence revealing the group of hackers is Russian. Bangladesh Central Bank was subject to a cyberheist losing $81m to state-sponsored hackers. “Hackers are targeting financial organizations because they present a good way to make money”
“The Trojan provides monitoring capabilities like the ones used by the Carbanak group,” Reads in the report. Hackers are using the Trojan in many international locations and expanding their range of activities.
Kaspersky released a report revealing the Carbanak group in 2015. Up to $1 billion was robbed from 100 banks across the world by the prominent hacker group.
The report concluded stating spear-phishing infection is still the most popular way to spread and start targeted campaigns.
Investigations are still running to get more details on this advanced hacking tool.