AusCERT - Infections and Patches

HOME

About AusCERT

Membership

PKI Services

Training

Publications

Sec. Bulletins

Conferences

News & Media

Services

Web Log

Site Map

Site Help

Member login

Infections and Patches

Date: 08 January 2009

Click here for printable version

Greetings all,

Well the week started off quietly, until Thursday. I guess all the Linux vendors got back to work and started to play catchup. If you're running any Linux variant no doubt you will have some patching to do this week. Next week is the Microsoft patch week, so you Windows administrators will have your first run of patching for the year.

We have been processing a lot of logging sites in the past week or so. We are seeing a large number of Australian hosts being infected with Zbot (aka ZeuS). This key logger is well known for targeting banks, and the Australian banks are included in that list. Once this piece of malware has infected a machine it can make it very difficult to remove. Not only will it disable the ability to update a number of different anti-virus products, it can redirect you to phishing sites, take screen shots of your computer and install backdoors.

Have a good weekend,

Paul