republican-creole
Search:  

 
 
   News
newer
story category Rats, Not Phish
Lurking trojan bank info keyloggers
(old news - 09:00AM Thursday Nov 03 2005)
tags: security · software
"The Internet is now awash in programs called "remote access Trojans," or RATs, that feed on online banking passwords," claims MSNBC. These new trojans lurk undetected until a user enters the URL of a popular bank, at which time they spring to life recording the user's keystrokes. The Antiphishing Working Group says they've seen a significant uptick in such programs, from 30 in January to 170 distinct variations last month.

Related:
  1. Vista SP1 May Be Available Tomorrow
  2. Microsoft: Many Users LIKE Spyware
  3. DNS Fix Knocks Zone Alarm Users Offline
  4. Update Your Browser, Dummy
  5. New Firefox Extension Thwarts MITM Attacks
  6. Friday Evening Links
  7. Monday Morning Links
  8. Firefox Add-On Simulates Great Firewall Of China
Forums » Rats, Not Phish
view: topics flat text 
Post a:

X_Digit
Binary Enhanced
Premium
join:2003-06-12
Mansfield, TX

So sad...

The reason for the outbreak is the lack of enforcement from law enforcement agencies! People know that they can do this, with slim chances of getting caught!

Just last week, I had my wallet stolen from my car (which was parked in my drive-way). The thief took my credit cards from my wallet, and went absolutely crazy. Within the 8 hours before I realized of the burglary of my vehicle and had my cards stopped, he already charged over $8,000 on the cards! I called the police, did the appropriate reporting, etc. I called the bank the next day, and found out where the transactions took place (one being at a local Wal-Mart). I then called Wal-mart, with the information the bank provided me (time of transaction and amount) and they were able to pull a CLEAR video of the person using my card. I contacted the police about it, and four days later... they have YET to even view the video! WTF!

I'm still in a mess getting the transactions cleared from my card... which is turning out to be more of a nightmare than I had thought! Even if they were caught, the assigned detective told me he would hold the person on "Abusive use of a credit card". WTF? What about BMV (burglary of a motorized vehicle) or Forgery (per transaction), etc? Why just "Abusive use of a credit card".

This, my friends, is why there's an out-break in these kinds of activities... hell, I'm almost half tempted now to go rob a bank! (Just kiddin')

MoeDumb
I already have a Messiah.
Premium
join:2002-09-23

Re: So sad...

Want action? Send the above to your local newspaper, identifying the police precinct and the name of that apparently indifferent detective. All of whose salaries, by the way, you are paying.
--
"tick...tick...tick..." »www.jtf.org/

Cheese
Premium
join:2003-10-26
Naples, FL
clubs:


edit:
November 3rd, @10:43AM

said by X_Digit See Profile :

The reason for the outbreak is the lack of enforcement from law enforcement agencies! People know that they can do this, with slim chances of getting caught!

Just last week, I had my wallet stolen from my car (which was parked in my drive-way). The thief took my credit cards from my wallet, and went absolutely crazy. Within the 8 hours before I realized of the burglary of my vehicle and had my cards stopped, he already charged over $8,000 on the cards! I called the police, did the appropriate reporting, etc. I called the bank the next day, and found out where the transactions took place (one being at a local Wal-Mart). I then called Wal-mart, with the information the bank provided me (time of transaction and amount) and they were able to pull a CLEAR video of the person using my card. I contacted the police about it, and four days later... they have YET to even view the video! WTF!

I'm still in a mess getting the transactions cleared from my card... which is turning out to be more of a nightmare than I had thought! Even if they were caught, the assigned detective told me he would hold the person on "Abusive use of a credit card". WTF? What about BMV (burglary of a motorized vehicle) or Forgery (per transaction), etc? Why just "Abusive use of a credit card".

This, my friends, is why there's an out-break in these kinds of activities... hell, I'm almost half tempted now to go rob a bank! (Just kiddin')
This is law enforcement for you, they feel sometimes that certain things are just not worth their time. I had some stuff stolen from an old truck of mine, all stereo related, the idiot who stole it lived right down the street from where I worked at the time. The person even had the SAME truck as me, same year and model. The cop showed up to my work that night to speak about it, he didn't even fill out any paperwork and said "ill keep an eye out for his truck" and left, I called his supervisor and explained this and the same cop came back pissed, he was cussing and calling me names through his loud speaker on his car when I wouldn't come out to speak to him after I told him I wanted another deputy out to file a report and also to check for fingerprints, 2 people entered my truck, my driver window was broken but the passenger door had been opened by one of the people that did this as my truck was locked , so then, the person who took my stuff didn't come home for a week, finally, after ME badgering them, I saw the guy driving down the street and I followed him and called the cops. They stopped him, he played stupid and claimed he couldn't speak english, he was Hispanic. They called a person to speak with him, he had the stuff IN HIS CAR, including a CD CASE that he took, now, the sad part is, I explained to the cop that there was a paycheck stub in the CD case from a friend who worked with me at the same business, she wouldn't even look in the thing to show that I was telling the truth, also, she asked me to name off Cd's, i named off about 6, she said ok, then let the guy go with the stuff. I never saw my stereo equipment again due to the incompetence of these cops here, and I am sure, that's what's going to happen here, he is going to walk away with a slap on the wrist. The law enforcement in this country is something to behold sometimes really, makes you wonder how someone who is so uncaring is in the law enforcement business.

IB_Music_Thief

@207.195.x.x


thumbs down from:
Andrew J See Profile

said by x_digit :
I contacted the police about it, and four days later... they have YET to even view the video! WTF!
And I'll bet the little snot-nose punk's mommy and daddy taught him that it was ok steal music and video online, now he's moved on to burglary. Unfortunately, law enforcement is fighting a losing battle with our societies lack of morals.
jsouth
Jsouth

join:2000-12-12
Wichita, KS

Re: So sad...

Actually he started as a troll with no balls to register.:p
--
BTK is guilty!!!!

kamm

join:2001-02-14
Brooklyn, NY
·Packet8

said by X_Digit See Profile :

The reason for the outbreak is the lack of enforcement from law enforcement agencies! People know that they can do this, with slim chances of getting caught!

Just last week, I had my wallet stolen from my car (which was parked in my drive-way). The thief took my credit cards from my wallet, and went absolutely crazy. Within the 8 hours before I realized of the burglary of my vehicle and had my cards stopped, he already charged over $8,000 on the cards! I called the police, did the appropriate reporting, etc. I called the bank the next day, and found out where the transactions took place (one being at a local Wal-Mart). I then called Wal-mart, with the information the bank provided me (time of transaction and amount) and they were able to pull a CLEAR video of the person using my card. I contacted the police about it, and four days later... they have YET to even view the video! WTF!

I'm still in a mess getting the transactions cleared from my card... which is turning out to be more of a nightmare than I had thought! Even if they were caught, the assigned detective told me he would hold the person on "Abusive use of a credit card". WTF? What about BMV (burglary of a motorized vehicle) or Forgery (per transaction), etc? Why just "Abusive use of a credit card".

This, my friends, is why there's an out-break in these kinds of activities... hell, I'm almost half tempted now to go rob a bank! (Just kiddin')
Well, you're in TX, so I guess you know that if your name would 'Bush' or 'DeLay' you'd be already cleared and the guy ould be behind bars already.
lefty1

join:2002-10-25
Clay, NY

One of the more frustrating aspects of this is that the laws covering this sort of theft are inadequate, and the morons who make the laws just don't get it. I wrote my senator about this last year and received no response. Apparently her family hasn't been affected by any of this yet, so she doesn't care. Make the perps financially responsible for the mayhem they've created. Incarceration plus full repayment of any financial losses you and any other victims have incurred plus some serious fines would be a start.

On the rare occasions when anyone is caught, their court-appointed attorney plea bargains so they can plead to a lesser crime, which often has minimal if any jail time. Then they're right back in business, while you get left holding the bag.

gar8182
Premium
join:2004-02-18
Seattle, WA
...and just another reason why vigilante-ism(?) is on the rise. Police are getting tired of arresting the same people over and over and watching the courts put them back on the street a couple days later.

Gandalf1315
Freelance Philosopher

join:2001-05-23
Indianapolis, IN
·Vonage
·RoadRunner Cable

said by X_Digit See Profile :

Even if they were caught, the assigned detective told me he would hold the person on "Abusive use of a credit card". WTF? What about BMV (burglary of a motorized vehicle) or Forgery (per transaction), etc? Why just "Abusive use of a credit card".
Welcome to the Corporate States of America!!!

Where felonies against common citizens are ignored and misdemeanors against corporations are enforced to the fullest extent of the law including 6 and 7 figure fines.
--
No man's life, liberty or fortune is safe while our legislature is in session.--- Benjamin Franklin
sproket90

join:2004-09-16
Dayton, OH
sorry you got robbed.. but what the hell are you doing leaving your wallet in your car...?


SeVere

join:2001-01-06
Chicago, IL

said by X_Digit See Profile :

The reason for the outbreak is the lack of enforcement from law enforcement agencies! People know that they can do this, with slim chances of getting caught!

Even if they were caught, the assigned detective told me he would hold the person on "Abusive use of a credit card". WTF? What about BMV (burglary of a motorized vehicle) or Forgery (per transaction), etc? Why just "Abusive use of a credit card".

To answer your question, with the burden of proof being on the State, the person using the card may not necessarily the person who broke into your vehicle.

The detective would have to be able to prove that the two parties are one and the same. No evidence of the burglary to your vehicle, no charge. The person could have found the cards in the wallet in an alley. Did the person commit a crime...yes, but not necessarily Burglary to a Motor Vehicle.

What the State would be able to prove in that scenario is that the person in possession of your card committed "abusive use of a credit card."

Did your detective explain that to you?

X_Digit
Binary Enhanced
Premium
join:2003-06-12
Mansfield, TX

Re: So sad...

No, he didn't. To me, "Abusive Use of a Credit Card" would be a law I WOULD BREAK, by intentionally using it passed it's limit, etc. Doesn't sound like a term you'd use to charge somebody who INTENTIONALLY took the card without authorization, and used it. That, to me, sounds more along the terms of "Credit Card Fraud".

It's funny... I had a school-mate sentenced to 4 years of prison just out of High School for stealing a check book and writing 5 checks, totaling $580. They gave him a separate FORGERY charge for EACH CHECK! So, why is it that the guy who sucked my cards for over $8K get LESS of a punishment?

dougdew-1

@mo.charter
The law enforcement office that investagates credit card forgery is not the local police but the secret service you should contect them about the problem it may not sound right but it is the truth. Good Luck

SeVere

join:2001-01-06
Chicago, IL

Re: So sad...

said by dougdew-1 :

The law enforcement office that investagates credit card forgery is not the local police but the secret service you should contect them about the problem it may not sound right but it is the truth. Good Luck
Not totally true. There are State laws and there are federal laws. Many times the laws mirror each other and there is cross jurisdiction on some matters. Credit Card fraud is one of them.

The local police can prosecute Credit Card Fraud and so can the Secret Service, however, the U.S.S.S. is very selective on the cases that they investigate and prosecute.

Credit Card Fraud Cases are a dime a dozen. In reality on Credit Card Fraud Cases, you are not the victim, the bank is. You are reimbursed by the bank and made whole. The bank is the party that receives the loss.

The U.S.S.S. has neither the time nor the inclination to investigate every single case of Credit Card Fraud throughout the United States. They don't have enough personnel to do that and they won't.

upidstay

@bellsouth.net

RATs

the LOVE of money is the root of ALL evil...

owenhome
keeper of the magic blue smoke
Premium
join:2002-07-13
Wichita Falls, TX

Re: RATs

Yeah? Obviously you've never been married.

AtomicZero

join:2004-11-24
West Palm Beach, FL
·Comcast

scary stuff

quote:
These new trojans lurk undetected until a user enters the URL of a popular bank, at which time they spring to life recording the user's keystrokes.
so are you guy's saying that these new trojans can't be detected by A/Vs unless they become active?

owenhome
keeper of the magic blue smoke
Premium
join:2002-07-13
Wichita Falls, TX
·RoadRunner Cable
·AT&T Southwest

Re: scary stuff

It has to be active to know when you go to the banks web site, so there would still be an active process. It's just that the trojan isn't doing anything significant until it detects certain activity. I think the more appropriate term would be "lies in wait". Good AV's should detect the file regardless of its level of activity.
--
Never argue with a fool, people might not know the difference.

AtomicZero

join:2004-11-24
West Palm Beach, FL

Re: scary stuff

great makes me feel better. cuz it sounded worse the other way.
moonpuppy

join:2000-08-21
Glen Burnie, MD

I wonder how this works with Quicken.....

Mine is set up with as password vault so I don't enter them each time to access my bank and credit card statements.
Forums » Rats, Not Phish


Tuesday, 18-Nov 10:24:26 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 9 years online! © 1999-2008 dslreports.com.