Yuval Ben-Itzhak, the CTO of Finjan, has warned IT managers in companies of all sizes to be on the look-out for a wave of Trojans, and to protect their IT resources and business data, after it came to light that a ‘crimeware kit’ was being sold for $1,000 to enable would-be hacker criminals to quickly set up appropriate malicious code.

The kit includes a new Trojan variant, ‘Prg’, researched by Finjan’s Malicious Code Research Center (MCRC) and also noted by Don Jackson of managed security specialist SecureWorks, which relays sensitive data collected during employees’ online activity to hacker websites, using a SSL-encrypted format.

"This trend highlights the alarming growth of crimeware toolkits being sold to criminals by hackers. Such crimeware is focusing on stealing sensitive business data and sending it back to criminals’ servers over encrypted communication channels like SSL, in order to go undetected", said Ben-Itzhak.

Ben-Itzhak went on to say that, “IT managers need to be aware of this latest evolution in crimeware, as Finjan’s research confirms that attempts to pattern malicious code and create signatures, or to categorize known malicious sites, are clearly “too little, too late” when it comes to providing adequate protection to today’s dynamic and evasive web threats. The way to detect modern malicious code is to be able to understand in real-time what the code intends to do, before it does it,” concludes Ben-Itzhak.

http://www.finjan.com

•Date: 6th July 2007• Region: World •Type: Article •Topic: Warnings
Rate this article or make a comment - click here