Search This Blog

Thursday, October 23, 2014

0wning Emmental | Fortinet Blog

A long time ago, I posted a video showing how to control Zitmo (the mobile component of ZeuS). It turns out you can (nearly) do exactly the same with Emmental. If you are not aware of Operation Emmental, please jump to this excellent white paper.
So, basically, this operation aims at compromising bank accounts, in particular (but not limited to) Swiss banks - where the naming Emmental comes from. Like ZeuS and Zitmo, or SpyEye and Spitmo, Emmental compromises the victim's PC and installs a trojan spyware on the Android phone. The scenario is well devised: the Android application looks like a secure SMS application that the bank would ask you to install.


0wning Emmental | Fortinet Blog

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.