Zeus Variant 'Floki Bot' Targets PoS Data

Trailrunner7 quotes a report from On the Wire: Malware gangs, like sad wedding bands bands, love to play the hits. And one of the hits they keep running back over and over is the Zeus banking Trojan, which has been in use for many years in a number of different forms. Researchers have unearthed a new piece of malware called Floki Bot that is based on the venerable Zeus source code and is being used to infect point-of-sale systems, among other targets. Flashpoint conducted the analysis of Floki Bot with Cisco's Talos research team, and the two organizations said that the author behind the bot maintains a presence on a number of different underground forums, some of which are in Russian or other non-native languages for him. Kremez said that attackers sometimes will participate in foreign language forums as a way to expand their knowledge. Along with its PoS infection capability, Floki Bot also has a feature that allows it to use the Tor network to communicate. "During our analysis of Floki Bot, Talos identified modifications that had been made to the dropper mechanism present in the leaked Zeus source code in an attempt to make Floki Bot more difficult to detect. Talos also observed the introduction of new code that allows Floki Bot to make use of the Tor network. However, this functionality does not appear to be active for the time being," Cisco's Talos team said in its analysis.

Re:

[OneHundredAndTen]

They meant Microsoft software.

It's all in the name.

[dcw3]

Someone's been watching too much TV...
http://vikings.wikia.com/wiki/... [wikia.com]

Re:

[stealth_finger]

Why the double i?

Re:

[Hognoxious]

What double i?

Re:

[stealth_finger]

Thankfully, niiggers aren't smart enough to do this

We need to rid ourselves of niiggers,

No more towelheads, niiggers, kikes, wetbacks, and chinks!

It's a fact that niiggers,

While niiggers

It's a fact that niiggers

Those ones, at least Mr "Not a racist" here is consistent.

Re:

[Hognoxious]

I think there's a problem with your browser. Are you running Windows? If so, reinstall your OS.

Re:

[stealth_finger]

II'm not reiinstalliing anythiing.

Re:

[JustAnotherOldGuy]

all you're capable of doing is attempting to discredit me by falsely labeling me a racist.

You're not a racist, you're an asshole. And if you ever dragged your goober ass through my neighborhood you'd be reclassified as a "target".

Thank God it doesn't target valuable data.

[Anonymous Coward]

Only Piece of Shit data.

Yo dawg

[Hognoxious]

sad wedding bands bands

Nice one, manishs.

Zeus Variant only targets Microsoft Windows

[khz6955]

'Zeus, ZeuS, or Zbot is a Trojan horse malware package that runs on versions of Microsoft Windows [wikipedia.org]'

Zeus Variant and Malware gangs

[khz6955]

Don't you mean Microsoft Windows and Zeus [zeusedit.com] Variant and Malware gangs