Shark Spider

Description

(Kaspersky) Recently Kaspersky Lab has contributed to an alliance of law enforcement and industry organizations, to undertake measures against the internet domains and servers that form the core of an advanced cybercriminal infrastructure that uses the Shylock Trojan to attack online banking systems around the globe.

Shylock is a banking Trojan that was first discovered in 2011. It utilizes man-in-the-browser attacks designed to pilfer banking login credentials from the PCs of clients of a predetermined list of target organizations. Most of these organizations are banks, located in different countries.

Names

Name	Name-Giver
Shark Spider	CrowdStrike

Country

• Russia

Motivation

• Financial crime

First Seen

2011

Observed Sectors

• Financial

Observed Countries

• Worldwide

Tools

• Shylock

Operations

• 2013-01: New Version of Shylock Malware Spreading Through Skype https://threatpost.com/new-version-shylock-malware-spreading-through-skype-011713/77416/

Counter Operations

• 2014-07: Global action targeting Shylock malware https://www.europol.europa.eu/newsroom/news/global-action-targeting-shylock-malware

Information

• https://securelist.com/shylockcaphaw-malware-trojan-the-overview/64599/

Other Information

Uuid

c967a0bb-d7ec-4955-83ca-8b90172ef9af

Last Card Change

2020-04-14