Russian (Gozi) Trojan powering massive ID-theft ring
Researchers at SecureWorks have stumbled upon what appears to be a massive identity theft ring us 56b ing state-of-the-art Trojan code to steal confidential data from thousands of infected machines in the U.S.
The Trojan, which connects to a server in Russia, has so far pilfered information from more than 5,200 home computers with 10,000 account records. The records retrieved included account numbers and passwords from clients of many of the top global banks and financial services companies (over 30 banks and credit unions were represented), the top US retailers, and the leading online retailers.
"The stolen data also contained numerous user accounts and passwords for employees working for federal, state and local government agencies, as well national and local law enforcement agencies. The stolen data also contained patient medical information, via healthcare employees and healthcare patients, whose username and passwords had been compromised via their home PC," Jackson said.