New Variant of Zeus Trojan Hides Malware in Photos

Zeus adds steganography to its bag of tricks.

Trojan juggernaut Zeus is already widely accepted as one of the more dangerous online bank information stealing malware out there. Even so, security researchers have discovered that it recently received a significant upgrade. ZeusVM, as it is called, uses steganography to embed malicious code into a legitimate JPG image hosted on a server.

“The malware was retrieving a JPG image hosted on the same server as were other malware components,” wrote senior security researcher at Malwarebytes Jerome Segura. “From a webmaster point of view, images (especially ones that can be viewed) would appear harmless.”

After researchers decryped the malicious file, they found the targeted banks included Deutsche Bank, Wells Fargo and Barclays.

Original article by Jeremy Kirk.
Read the full story here.

One Response to “New Variant of Zeus Trojan Hides Malware in Photos”

Comment from k
Time 02/19/2014 at 1:34 pm

As unpopular as it is, White Listing is sounding better all the time.