Financial malware on the rise

According to Kaspersky Lab’s Financial cyber threats in 2013 study, the number of cyber attacks involving financial malware increased to 28.4 million – 27.6% more than 2012.

Programmes designed to steal financial information include banking Trojans, keyloggers and two relatively new classes of malware – one that steals from Bitcoin wallets and another that downloads software to generate the crypto-currency. The combined activity of programmes targeting Bitcoin became one of the main drivers behind the growth in financial cyber attacks in 2013. Another factor was the discovery of a number of dangerous vulnerabilities used by criminals to conduct cyber attacks via the popular Java platform.

In 2013, Kaspersky Lab security solutions protected 3.8 million users from financial attacks (an increase of 18.6% year on year). Banking Trojans, including the notorious Zbot, Carberp, and SpyEye programmes, accounted for two-thirds of financial malware. However, compared with 2012 the share of this type of malware has fallen due to an increase in activity by malicious programmes targeting Bitcoin.

In 2013, in South Africa, Kaspersky Lab’s solutions detected over 83 000 attempts to infect user’s PCs with financial malware – this is an over 105% increase in comparison to 2012. An average number of attacks of financial malware per user was 3,6: the number of users attacked raised by 139% in comparison with 2012 – more than 4% of users faced them.

The proportion of keyloggers – malicious programmes that intercept keystrokes – also saw a gradual decline as cybercriminals switch from these highly specialised programmes to Trojans with a wide range of functions.

The proportion of financial cybercrime is greatest in Afghanistan, Bolivia, Cameroon, Mongolia, Myanmar, Peru, Turkey and Ethiopia, where this type of threat accounted for more than 12% of all malware incidents.

There was also a lot of activity in the mobile malware segment, with 2013 seeing explosive growth in the number of mobile apps capable of stealing money from users’ bank accounts. The number of these types of threats in Kaspersky Lab’s collection grew almost 20 times throughout the year. The vast majority of attacks targeted the owners of Android smartphones.

“Last year saw a significant increase in the proportion of financial cyber threats, with malware designed to steal money playing a key role. The popularity of banking Trojans and other programmes targeting financial data is due to the fact cybercriminals can use them to make money quickly. The current situation has forced users and financial institutions to take active measures against online threats, while security software vendors have to develop new protection solutions,” commented Sergey Lozhkin, Senior Security Researcher at Kaspersky Lab.

To counter financial cyber threats, Kaspersky Lab solutions for home users and small businesses integrate Safe Money technology that protects user data during online banking and e-payment sessions.

Companies that provide financial online services to their clients may benefit from Kaspersky Lab’s comprehensive Kaspersky Fraud Prevention platform. It was developed to deliver rigorous, multi-layered security for online transactions: a server solution to check customer transactions as well as applications to protect users’ computers and mobile devices.

Malware is not the only method used by criminals to steal money online: phishing, or creating fake copies of sites to obtain confidential user data, is also popular. In 2013, Kaspersky Lab protection solutions blocked more than 330 million phishing attacks, of which 31.45% were performed using the names of banks, e-payment systems or online stores.

The ‚ÄòFinancial cyber threats in 2013′ report used data obtained voluntarily from Kaspersky Security Networkparticipants. Kaspersky Security Network is a globally distributed cloud-based infrastructure designed to quickly process depersonalised data about threats which users of Kaspersky Lab’s products encounter.

* Follow Gadget on Twitter on @GadgetZA