Gladiator Research and Security

Over the past year, security researchers found many new Web attacks indicating that the “bad guys” have come up with some rather advanced methods to accomplish their dirty deeds.  In the past few months alone, two particular banking attacks have been detected that demonstrate the sophisticated methods being used to steal money from online banking users.  In the first attack method, dubbed “Chat-in-the-Middle,” the fraudster creates a fake support chat session with his victim by claiming to be from the bank’s fraud department.  The fraudster then uses social engineering techniques to attempt to gather further information from the unsuspecting victim.  The second attack, a Trojan known as URLZone, involves editing a user’s banking website to hide money transfer transactions started by the attackers.  This technique gives attackers ample time to transfer the funds through “money mules” and, eventually, into their own accounts, well before the attack is ever spotted by the victim.