• E-mail
• Print
• Comment
• Font Size
• Digg
• del.icio.us
• Discuss article

Panda Software and RSA Security Shut Down Websites Selling Malware Targeting Global Financial Institutions

Posted on: Wednesday, 8 March 2006, 15:00 CST

GLENDALE, Calif., March 8 /PRNewswire/ -- Panda Software and RSA Security Inc., a leading provider of online security and anti-fraud solutions, detected and helped to disable several websites used in a complex system for creating and selling custom designed Trojans -- a threat that could be used for corporate espionage, and theft of confidential and financial data. As a result of Panda Software's and RSA Security's joint efforts, the Web pages that sell these Trojans are now inaccessible to hackers.

RSA Security's expertise and innovation in neutralizing fraud threats as they emerge -- a capacity gained in its acquisition of Cyota in 2005 -- enables businesses to proactively protect themselves from phishing, pharming and other types of emerging threats.

Panda Software's TruPrevent(TM) Technologies recently detected a new Trojan, called Trj/Briz.A, which was previously unknown to security companies. PandaLabs experts conducted an in-depth analysis of this Trojan's code, detailed to assist in scams, leading to the Trojan's termination. Given the seriousness and sophistication of the attack, Panda Software contacted RSA Cyota's 24/7 Anti-Fraud Command Center, which helped to disable the Web pages selling malware by contacting the ISPs hosting the site and identifying them as a source of these illicit Trojan services.

Due to this combined effort, three websites selling Trojans were shut down by the ISPs hosting them, as well as two others on which hackers find information about infections their malware cause.

According to Luis Corrons, director of PandaLabs: "The collaboration between RSA Security and Panda Software has been key to rapidly dismantling these dangerous websites for creating and selling targeted malware. Thanks to this, it has been possible to make the necessary changes to make all sites involved inaccessible."

"In the rapidly evolving world of online fraud, it is critical to have industry collaboration and knowledge sharing such as Panda Software and RSA Security demonstrated in this complex and sophisticated case," stated Chris Young, senior vice president and general manager of RSA Cyota Consumer Solutions. "We are determined to keep our global financial institution customers one step ahead of the fraudsters; strategic partnerships and collaboration such as this expands our reach and enhances our ability to respond rapidly and decisively as new attacks emerge."

The creator of this system offered hackers the chance to generate custom designed Trojans that can foil traditional security solutions as tools of targeted attacks, i.e. attacks on specific users of specific financial institutions. In addition, buyers would receive a system for monitoring the status of the infections caused, providing them with a large quantity of data about the infected computers: IP addresses, passwords and even the physical location of the computers.

"This case highlights the need for proactive technologies that can detect malicious code without signature files. Had it not been for TruPrevent(TM) Technologies, the system for creating Trojans that has now been dismantled could have been operating with impunity for a long time," adds Corrons.

About RSA Cyota Consumer Solutions

RSA Cyota Consumer Solutions, a division of RSA Security, offers proven solutions for online banking and e-commerce that range from adaptive authentication -- with risk-based technology, one-time-passwords and transaction-signing -- to anti-phishing services and real-time transaction monitoring that controls fraud and manages risk. The company's eFraudNetwork(TM) community is the world's most effective cross-bank collaborative online fraud network. Today, many of the world's top 50 banks, including nine of the top 12 banks in North America and the UK, use RSA Cyota solutions to protect over 430 million consumers.

About RSA Security Inc.

RSA Security Inc. is the expert in protecting online identities and digital assets. The inventor of core security technologies for the Internet, the company leads the way in strong authentication and encryption, bringing trust to millions of user identities and the transactions that they perform. RSA Security's portfolio of award-winning identity & access management solutions helps businesses to establish who's who online -- and what they can do.

With a strong reputation built on a 20-year history of ingenuity, leadership and proven technologies, we serve approximately 20,000 customers around the globe and interoperate with more than 1,000 technology and integration partners. For more information, please visit http://www.rsasecurity.com/.

About PandaLabs

Since 1990, its mission has been to analyze new threats as rapidly as possible to keep our clients safe. Several teams, each specialized in a specific type of malware (viruses, worms, Trojans, spyware, phishing, spam, etc), work 24/7 to provide global coverage. To achieve this, they also have the support of TruPrevent(TM) Technologies, which act as a global early-warning system made up of strategically distributed sensors to neutralize new threats and send them to PandaLabs for in-depth analysis. According to AV-Test.org, PandaLabs is currently the fastest laboratory in the industry in providing complete updates to users (more info at http://www.pandasoftware.com/pandalabs.asp).

About Panda Software

Panda Software (http://www.pandasoftware.com/) is a leading developer and provider of integrated security solutions to combat viruses, hackers, Trojans, spyware, phishing, spam and other Internet-borne threats. With the revolutionary TruPrevent(TM) Technologies, Panda Software's innovative solutions offer a greater return on investment, keeping clients protected even against new threats that have yet to be identified. PandaLabs, the fastest laboratory in the industry to provide complete updates to users, offers a worldwide response to malware 24 hours a day, 7 days a week, all year round.

Panda Software's centrally-managed security solutions protect servers, and gateways and all network entry points, ensuring a straightforward and highly effective line of defense against Internet threats for large organizations, SMBs and consumers. Panda solutions are backed by a team of expert support technicians in all countries where the company is present. Tech support services are available 24 hours a day, seven days a week.

For more information and evaluation versions of all Panda Software solutions, visit our website at: http://www.pandasoftware.com/

To access the latest Panda Software press releases, please visit http://onlinepressroom.net/panda.

For more information: Carolina Sanabria Public Relations Manager Panda Software, USA Tel: 818-543-6909 pr@pandasecurity.com

Panda Software

CONTACT: Carolina Sanabria, Public Relations Manager of Panda Software,USA, +1-818-543-6909, pr@pandasecurity.com

Web site: http://www.pandasoftware.com/

Source: PRNewswire

More News in this Category