TorrentLocker: Crypto-ransomware still active, using same tactics

In December 2014, ESET released a white paper about TorrentLocker, a crypto-ransomware family spreading, via spam, email messages that impersonated local postal service, energy or telecom companies. The paper described its distribution scheme, its core functionalities, its network protocol and exposed some similarities with the Hesperbot banking trojan. During the last few months, we decided to … More TorrentLocker: Crypto-ransomware still active, using same tactics

Advanced Banking Trojan “Hesperbot” Can Also Steal Bitcoins

ESET HQ malware research lab is reporting new campaigns of the very effective banking trojan Hesperbot. As previously uncovered by ESET, Hesperbot is using very credible-looking spreading campaigns related to trustworthy organisations and lures victims to run the malware. The malware itself has evolved as well – ESET has researched new versions of Hesperbot that … More Advanced Banking Trojan “Hesperbot” Can Also Steal Bitcoins

Hesperbot – A New, Advanced Banking Trojan in the Wild

A new and effective banking trojan has been discovered targeting online banking users in Turkey, the Czech Republic, Portugal and the United Kingdom. It uses very credible-looking phishing-like campaigns, related to trustworthy organizations, to lure victims into running the malware. The Story In the middle of August we discovered a malware-spreading campaign in the Czech … More Hesperbot – A New, Advanced Banking Trojan in the Wild