You are here: Home » Internet Security » Limbo Malware is on the Loose so Beware: Be Careful With Your Bank Account Information

Limbo Malware is on the Loose so Beware: Be Careful With Your Bank Account Information

October 2, 2008 · Filed Under Internet Security

Do you transact online and do online banking? If yes, then beware of Limbo malware. It’s a Trojan horse program that can hijack your account by injecting itself in web browsers and requests bank card numbers and PIN numbers from innocent or unknowing users.

According to IDG News Service, the malware known as Limbo “integrates itself into a Web browser using a technique called HTML injection, said Uri Rivner, head of new technologies at RSA Consumer Solutions. Because it’s so closely integrated in the browser, it can operate even while the user is at the real bank site and can actually change the layout of that site, he said.”

In addition,

“Nothing tells you that something is wrong here, with one exception: You’re being asked to provide some information that you were never asked to do before,” Rivner said during a briefing for reporters and analysts earlier this week. “If you are convinced that you are now communicating with the bank, the fraudsters can get away with anything they like.”

Limbo can get onto a user’s computer through many paths, including both pop-up messages that ask you to download an add-on program and methods that are invisible to the user, he said. They sometimes get on to PCs in conjunction with other phishing attacks.

And like other malware programs, Limbo is becoming available to more fraudsters through an underground market that includes a complex supply chain and falling prices, according to Rivner. Limbo costs about $350 (U.S.), down from about $1,000 a year ago and $5,000 two years ago, he said.

“The big trend here is that it’s becoming affordable,” Rivner said.

The online fraud marketplace consists of so-called harvesters, who collect user information and “cash-out” operations that use the information to do whatever has to be done to translate that information into money. For example, harvesters may capture credit card numbers and cash-out operations may use those cards to buy products online, have them delivered to an address and sell them on the black market, Rivner said. The two classes of fraudsters typically meet and do business with each other in IRC chatrooms and dedicated Web forums, where the most successful fraudsters are the ones who develop a reputation for working reliably and honestly with other participants, Rivner said.

In line with this, internet users are advised to update their antivirus softwares and enable strict online security and privacy measures through their web browsers like Google Chrome, Firefox 3.0.1 or later versions and Internet Explorer 8. An antivirus software that has a capability to protect you from accessing unsecure websites (Like McAffee Antivirus software and AVG Pro) can also help. Just beware of this malware or else you will lose a lot of money if you’re into online banking.

If you're new here, you may want to subscribe to my RSS feed for Free and get the latest updates and news on gadgets, cell phones, mp3 players, free downloadable softwares, computer tips, cell phone hacks, networking and internet technology.

Comments

5 Responses to “Limbo Malware is on the Loose so Beware: Be Careful With Your Bank Account Information”

Joy on October 3rd, 2008 2:52 am

Recently lang ako natuto mag transact online nung nagopen account ako dito sa Oz for may oz paypal account requirements kaso di ako sanay kaya diko lagi ginagawa. Mas prefer ko over the counter.

Joys last blog post..Vertical shock

[Reply]
jessie on October 4th, 2008 9:51 am

Joy,

Over-the-counter transactions are really much safer than online banking transactions.

jessies last blog post..Audio-Visual Aid in Learning How to Stitch Up Wounds

[Reply]
Download Free Anti-virus Software, Firewall Software and Secure Email Software for Your Online Protection | Technology Talks on October 5th, 2008 4:19 pm

[...] When you transact online, it’s possible that you could be hijacked by malwares like the Limbo malware, or when you open your email, your mailbox could be infected by the alleged Torch/Invitation Virus. [...]
Secure Websites are Even Vulnerable to DDOS Attacks | Technology Talks on October 21st, 2008 12:06 pm

[...] like the Church of Scientology website using DDOS attacks. Before this, I have blogged about the Limbo Malware and Invitation Virus (which turned out to be a hoax). Please read them if you are interested in [...]
Facebook Virus: Facebook Users Under Attack By a Vicious Virus/Worm | Technology Talks on November 8th, 2008 3:25 pm

[...] just sure if the new social network Ziggs will encounter the same fate at the hands of spammers and malware creators. Maybe in the near [...]