Looming cyber attack threatens major banks
Some online victims of Project Blitzkrieg From McAfee Labs
December 13th, 2012
12:01 AM ET

Looming cyber attack threatens major banks

By Pam Benson

Some of the nation's biggest banks are at risk of a massive cyber attack next year that could potentially siphon funds from unsuspecting customers, according to a leading digital security firm.

The fraud campaign, known as Project Blitzkrieg, is a credible threat, the Internet security firm McAfee Labs concluded in a new report.

The malware has been lying dormant in U.S. financial systems and is scheduled to go active by the spring of 2013, McAfee researchers concluded.

The project "appears to be moving forward as planned," the report states.

People familiar with the study said some 30 financial institutions are targets of the campaign.

CNNMoney: Not a single bank is malware-free

They include Fidelity, E*Trade, Charles Schwab, PayPal, Citibank, Wachovia, Wells Fargo, Capital One, Navy Federal Credit Union and others.

Information about the intended cyber attack was discovered in September by the Internet security firm RSA during the course of monitoring a web chat room that the company says was run by a Russian hacker known as vorVzakone.

According to the report, the Russian was believed to be using the chat room to recruit fellow hackers to steal assets from bank accounts as part of a criminal enterprise.

At the time, there were doubts about the credibility of the threat, with some experts suggesting it was part of a Russian law enforcement sting.

"Our researchers have been poring into this and what they have found, they actually found somewhere between 300 to 500 devices in the U.S. that have actually been infected with the particular malware that this individual is talking about," said Pat Calhoun, a senior vice president at McAfee.

"That, combined with some additional research we’re doing, has led us to believe this is true. This is actually a real operation that this individual is planning to launch sometime before spring 2013."

The McAfee report states, "The targets are U.S. banks, with the victims dispersed across various U.S. cities, according to the telemetry data. Thus this group will likely remain focused on U.S. banks and making fraudulent transactions."

Calhoun said that McAfee has access to the malware and, through reverse engineering, has learned much about its capability and targets.

"We see the IP addresses and names of banks and so on or references to URLs."

Calhoun said the behavior of the Trojan suggests it is a variant of a previous known strain called Gozi. RSA labeled this latest version, Gozi Prinimalka.

But it's a tedious task dissecting the malware, and the company is still trying to figure out how it would create fraudulent bank transactions, Calhoun said.

Based on their analysis, the McAfee researchers believe the plan is to attack a small group of bank customers.

"This strategy is necessary if the attackers hope to succeed in transferring several million dollars over the course of the project," the report states. "A limited number of infections reduces the malware's footprint and makes it hard for network defenses to detect its activities."

But Calhoun said the fact the malware has been detected allows for a defense to be mounted.

"Since we know about it, we will be able to protect against it," Calhoun said. "We're working very closely with law enforcement and a lot of the potential targets to make sure they understand this and know how to behave or how to protect themselves against it."

Wells Fargo, the only financial institution to respond to questions about preparations it might be taking to thwart the potential attack, said it was watching for the threat.

"Security is core to our mission and safeguarding our customers' information is at the foundation of all we do," Wells Fargo said in a statement. "We constantly monitor the environment, assess potential threats, and take action as warranted."

The Department of Homeland Security, which takes the lead for the government on cyber security issues, had no comment on the McAfee report or Project Blitzkrieg.

soundoff (157 Responses)
  1. buy delta 8 THC

    Thanks a lot for the post.

    https://bit.ly/3dobJVs

    June 30, 2021 at 1:09 am | Reply
  2. Stephen Aniol

    How do I change the background on my blogspot including sidebars?

    https://www.facebook.com/KateKowalskyWebMarketing

    June 25, 2021 at 1:58 pm | Reply
  3. Catrina Clowdus

    Should I start a blog or website for addiction/recovery related information?

    https://twitter.com/katekdesigns

    June 23, 2021 at 3:27 pm | Reply
  4. Stanley Habeeb

    My video player in joomla doesn't play videos in firefox if the latest flash player isn't installed. I'd like to have it like a professional player to show a dialog saying: "Do you want to install flash player 10" or how it says when you go to a professional website so users don't have to search and download flash player manually.... . Does anyone know, how to do this?.

    https://www.linkedin.com/in/kmkowalsky/

    June 20, 2021 at 9:22 am | Reply
  5. https://topphimhot.net

    Best view i have ever seen !

    https://tvtropes.org/pmwiki/no_outbounds.php?o=https://topphimhot.net

    June 8, 2021 at 3:00 pm | Reply
  6. https://topphimhot.net

    Best view i have ever seen !

    https://images.google.com.bn/url?q=https://topphimhot.net

    June 8, 2021 at 2:13 am | Reply
  7. Della Nakken

    I wanted to start making some money off of my blog, how would I go about doing so? What about google adsense or other programs like it?.

    https://twitter.com/katekdesigns

    May 30, 2021 at 3:33 pm | Reply
  8. Giuseppe Salsedo

    Your style is unique in comparison to other folks I have read stuff from. Many thanks for posting when you've got the opportunity, Guess I will just bookmark this page.

    https://extraproxies.com/unit-test-of-repository-layer-that-returns-live-data-where-data-is-subject-to-change-over-time/

    May 18, 2021 at 6:27 am | Reply
  9. Do Zobaczenia W Tej Okolicy

    Hi it's me, I am also visiting this website daily, this website is actually good and the
    users are in fact sharing good thoughts.

    May 11, 2021 at 11:07 pm | Reply
  10. RV Slide Out Near Me

    http://clik.pw/KNPhD2

    May 9, 2021 at 9:53 am | Reply
  11. Internet Marketing Company California

    https://www.okane-antena.com/redirect/index/fid___100269/?u=https://affordableranking.com

    May 8, 2021 at 5:31 pm | Reply
  12. Seo Marketing Agency

    http://www.ncaavolleyball.net/__media__/js/netsoltrademark.php?d=affordableranking.com

    May 8, 2021 at 5:14 pm | Reply
  13. Social Media Marketing Masters

    Greetings! Very helpful advice within this post! It is the little changes which will make the most significant changes. Many thanks for sharing!

    http://www.tesay.com.tr/en?go=http://affordableranking.com/

    May 8, 2021 at 2:59 pm | Reply
  14. fiberglass repair shop near me

    http://www.whitemountainlures.com/__media__/js/netsoltrademark.php?d=ocrvcenter.com

    May 8, 2021 at 2:12 pm | Reply
  15. Internet Marketing Consultants

    You made some decent points there. I looked on the web for more information about the issue and found most people will go along with your views on this site.

    http://buckstopshere.net/__media__/js/netsoltrademark.php?d=affordableranking.com

    May 8, 2021 at 1:23 pm | Reply
  16. Internet Marketing Experts

    Hi! I could have sworn I’ve been to this web site before but after browsing through a few of the posts I realized it’s new to me. Anyhow, I’m certainly delighted I found it and I’ll be bookmarking it and checking back frequently!

    https://www.tokyo3.org/forums/holiday/?main=http3A2F2Faffordableranking.com

    May 8, 2021 at 2:13 am | Reply
  17. how to repair a slide out on a travel trailer

    Right here is the perfect site for everyone who wishes to find out about this topic. You understand a whole lot its almost tough to argue with you (not that I really would want to…HaHa). You definitely put a new spin on a topic that's been written about for a long time. Great stuff, just great!

    http://arflashcard.com/__media__/js/netsoltrademark.php?d=ocrvcenter.com

    May 7, 2021 at 11:33 pm | Reply
  18. Social Media Marketing Contractors

    http://atmprogram.com/__media__/js/netsoltrademark.php?d=affordableranking.com

    May 7, 2021 at 11:14 pm | Reply
  19. free gay vidioes

    Good site you've got here.. It’s difficult to find quality writing like yours nowadays. I seriously appreciate individuals like you! Take care!!

    http://www.ritmoflow.com/?videos=Dance&v=MX8CljeT9ks

    May 7, 2021 at 7:48 pm | Reply
  20. pasta near me

    You are so interesting! I do not suppose I've truly read through something like that before. So wonderful to find somebody with a few unique thoughts on this subject. Seriously.. thank you for starting this up. This site is one thing that is needed on the internet, someone with some originality!

    http://sier-paises.olade.org/utilidades/cambiar-idioma.aspx?idioma=2&url=https://sprintervanrepairshop.com

    May 7, 2021 at 3:04 pm | Reply
  21. Forklift Maintenance Shop California

    https://google.mk/url?sa=i&rct=j&url=https://forkliftrentalorangecounty.com

    May 7, 2021 at 12:03 pm | Reply
  22. Forklift Repair Shop Near Me

    Howdy! I simply want to give you a huge thumbs up for the great information you've got here on this post. I am coming back to your blog for more soon.

    https://cse.google.com.ni/url?sa=t&url=https://wildwestlifttrucks.com

    May 7, 2021 at 9:50 am | Reply
  23. Empty Beer Kegs Craigslist

    I blog often and I really thank you for your information. This great article has truly peaked my interest. I'm going to book mark your blog and keep checking for new details about once a week. I opted in for your RSS feed too.

    https://image.google.cl/url?rct=j&sa=t&url=https3A2F2Fallbrewsupplies.com&sa=D&sntz=1&usg=AFQjCNGaY_nlK9ozc51fqwjiVdMaYZL7rg

    May 7, 2021 at 8:41 am | Reply
  24. Forklift Extensions California

    Pretty! This was an incredibly wonderful article. Thank you for providing this info.

    http://ukraincy.wm.pl/tv/video/youtube/Fjla9ZGNUcI

    May 7, 2021 at 8:41 am | Reply
  25. dump truck paint schemes

    http://ytapi.com/embed/5kqgcjmjymc

    May 7, 2021 at 6:34 am | Reply
  26. strip clubs near me

    http://ww41.instergram.com/__media__/js/netsoltrademark.php?d=ocrv.world

    May 7, 2021 at 4:11 am | Reply
  27. Brewery Idaho

    Nice post. I learn something new and challenging on sites I stumbleupon every day. It will always be useful to read articles from other authors and practice a little something from their web sites.

    https://images.google.sm/url?sa=j&rct=j&url=https3A2F2Fcraftbrewersofboise.com&sa=D&sntz=1&usg=AFQjCNGaY_nlK9ozc51fqwjiVdMaYZL7rg

    May 6, 2021 at 5:58 pm | Reply
  28. best rv repair

    Excellent write-up. I absolutely love this website. Thanks!

    http://videoonline.pk/watch.php?v=jAS0oIH5Ong

    May 6, 2021 at 5:28 pm | Reply
  29. ymca near me

    https://archive.sapere.org.uk/ResourcesLinkClick.aspx?resourceId=567&redirectURL=http://ocrv.online

    May 6, 2021 at 5:17 pm | Reply
  30. Used Forklift Tires California

    http://calculator-ipoteka.ru/articles/credit-news.php?l=http3A2F2Fsocalforkliftcertification.com

    May 6, 2021 at 3:58 pm | Reply
  31. financial advisor near me

    Your style is unique compared to other folks I have read stuff from. Many thanks for posting when you have the opportunity, Guess I'll just book mark this blog.

    https://dspk.kindredplc.com/redirect.aspx?pid=3789659&bid=25820&redirectUrl=https://mastermindofmen.com

    May 6, 2021 at 1:23 pm | Reply
  32. mind training

    http://www.cs-games.net.ru/go?https://masteringthemanwithin.com

    May 6, 2021 at 11:15 am | Reply
  33. commercial truck collision repair

    https://google.es/url?sa=i&rct=j&url=https://fleetautorepairshop.com

    May 6, 2021 at 10:55 am | Reply
  34. business training near me

    https://images.google.ps/url?q=j&source=web&rct=j&url=https://realchrisburns.com

    May 5, 2021 at 8:26 pm | Reply
  35. napa near me

    http://www.elahmad.com/url.php?url=www.paradisepoolandspa.org

    May 5, 2021 at 7:41 pm | Reply
  36. diesel truck repair shop

    Saved as a favorite, I really like your web site!

    https://map.google.nr/url?sa=t&url=https://ocrvfleetservices.com

    May 5, 2021 at 7:06 pm | Reply
  37. aika online private server

    http://clients1.google.am/url?q=https://aikareborn.com

    May 5, 2021 at 2:07 pm | Reply
  38. truck repair services

    https://cse.google.ps/url?rct=j&sa=t&url=https3A2F2Fcommercialvanrepairshop.com&sa=D&sntz=1&usg=AFQjCNGaY_nlK9ozc51fqwjiVdMaYZL7rg

    May 5, 2021 at 10:20 am | Reply
  39. RV Awning California

    I couldn’t refrain from commenting. Exceptionally well written!

    https://image.google.com.kw/url?sa=i&rct=j&url=https://ocrv.fun

    May 5, 2021 at 2:36 am | Reply
  40. how to play on private aika server

    It’s hard to come by knowledgeable people about this subject, however, you sound like you know what you’re talking about! Thanks

    http://www.google.com.na/url?q=https://aikareborn.com

    May 5, 2021 at 2:31 am | Reply
  41. promaster camper conversion

    An interesting discussion is definitely worth comment. I believe that you should write more about this subject, it may not be a taboo subject but generally folks don't discuss these issues. To the next! Best wishes!!

    http://images.google.com.ua/url?q=https://www.fleetrepairshops.com

    May 4, 2021 at 11:35 pm | Reply
  42. volvo vnx

    https://local.google.com.vc/url?rct=j&sa=t&url=https://fleetservicesorangecounty.com

    May 4, 2021 at 5:30 pm | Reply
  43. Pam

    Just want to say your article is as amazing.
    The clarity in your post is simply excellent and i could assume you are an expert on this
    subject. Fine with your permission allow me to grab your
    RSS feed to keep up to date with forthcoming post.

    Thanks a million and please continue the enjoyable
    work.

    April 29, 2021 at 1:01 pm | Reply
  44. aa

    It's appropriate time to make some plans for the future and
    it is time to be happy. I have read this post and if I could I want to suggest you few interesting things or advice.
    Perhaps you can write next articles referring to this article.
    I wish to read more things about it!

    April 27, 2021 at 8:21 pm | Reply
  45. RV Mechanics Los Angeles

    http://hello.lqm.io/bid_click_track/8Kt7pe1rUsM_1/site/eb1j8u9m/ad/1012388?turl=http://wildandfarmstours.com/2019/10/29/125//

    April 24, 2021 at 5:12 pm | Reply
  46. rv repair in riverside ca

    http://libtomcrypt.com/__media__/js/netsoltrademark.php?d=ocrvcenter.com/rv-repair-shop-chino-california

    April 24, 2021 at 4:54 pm | Reply
  47. RV Refrigerator Orange County

    Greetings! Very helpful advice within this article! It's the little changes that make the most significant changes. Thanks for sharing!

    http://artiscoffee.com/__media__/js/netsoltrademark.php?d=ocrvcenter.net

    April 23, 2021 at 7:20 pm | Reply
  48. Forklift For Sale Near Me

    http://www.parmentier.de/cgi-bin/link.cgi?http://wildwestlifttrucks.com/clark-forklift-repair-orange-county-california/

    April 23, 2021 at 7:20 pm | Reply
  49. homes for sale spokane river

    Everything is very open with a clear clarification of the challenges. It was truly informative. Your website is very useful. Thank you for sharing!

    https://xn--ctbbj1acidfjbu3a.xn--p1ai/redirect?url=https://meganleary.com

    April 23, 2021 at 7:20 pm | Reply
  50. หวยเด็ด

    This is very interesting, You're a very skilled blogger.
    I have joined your rss feed and look forward to
    seeking more of your excellent post. Also, I've shared your website in my social networks!

    April 22, 2021 at 1:23 pm | Reply
  51. social url

    When someone writes an paragraph he/she retains the thought
    of a user in his/her mind that how a user can be aware
    of it. Therefore that's why this article is perfect.
    Thanks!

    March 28, 2021 at 9:41 pm | Reply
  52. URF

    Excellent, what a weblog it is! This weblog presents useful information to us,
    keep it up.

    March 25, 2021 at 4:44 pm | Reply
  53. หวย

    Right here is the right web site for anybody who would like to
    understand this topic. You understand a whole lot its almost
    tough to argue with you (not that I actually would want to…HaHa).
    You certainly put a fresh spin on a subject that has been discussed for a
    long time. Excellent stuff, just excellent!

    March 25, 2021 at 2:19 pm | Reply
  54. https://j-website.net

    Best view i have ever seen !

    https://images.google.jo/url?q=https://j-website.net

    March 25, 2021 at 10:53 am | Reply
1 2

Post a comment


 

CNN welcomes a lively and courteous discussion as long as you follow the Rules of Conduct set forth in our Terms of Service. Comments are not pre-screened before they post. You agree that anything you post may be used, along with your name and profile picture, in accordance with our Privacy Policy and the license you have granted pursuant to our Terms of Service.