Cyber criminals plan attack on major U.S. banks

05.10.2012
A cyber gang thought to be based in Eastern Europe and the former Soviet Union to participate in a scheme to steal millions of dollars from 30 major U.S. banks, according to RSA.

The organizers are thought to be associated with the Hangup Team, which claims to have used a proprietary Trojan family, called Gozi, to siphon $5 million through online banking accounts since 2008, RSA said Friday.

The gang, believed to have at least a half dozen members, hopes to recruit 100 "botmasters" through the criminal underground and could launch the attack within a couple of months.

"This is the first time we've seen a gang try to orchestrate this large-scale banking-Trojan campaign," said Mor Ahuvia, a cyber crime communications specialist at RSA. She declined to name the targeted banks.

The accomplices would be in charge of managing the compromised PCs of banking customers to steal user IDs and passwords and transfer money to bank accounts set up by the gang. They would also be responsible for launching small on victims' mobile data services to prevent them from seeing messages typically sent from banks to notify customers of a money transfer. In return, the gang is promising a portion of the money they receive.