IBM Issues Warning on ‘Well-Camouflaged’ Bank Malware That’s Draining Login Credentials

A dangerous banking malware is currently wreaking havoc in Latin America, with tech giant IBM issuing a warning about its stealthy and deceptive nature. According to senior threat researcher Itzhak Chimino, IBM has uncovered a sophisticated banking trojan called UnregStealer that is specifically targeting banks in Latin America by masquerading as a Chrome browser extension. The malware tricks unsuspecting users into installing it under the guise of updating their Secure Sockets Layer (SSL) certificate.

Chimino explains that UnregStealer operates by presenting users with a fake security warning, claiming that their browser requires an SSL certificate update. This fabricated story serves as a ploy to get victims to run an executable file, ultimately leading to the installation of the malicious software. Once installed, the malware monitors users’ online activities, particularly when they visit targeted banking websites. It then proceeds to steal session cookies from these sites, capturing sensitive information such as passwords, account numbers, and one-time passwords as users interact with the web pages.

What sets UnregStealer apart from other banking trojans is its human-operated nature. An actual operator is actively monitoring each victim’s session in real-time, manually triggering the malware to collect valuable data. This hands-on approach makes the malware extremely difficult to detect by traditional security systems, as the payload only activates under human direction.

IBM’s Chimino warns that the UnregStealer banking malware has the potential to escalate its threat level, as the observed infrastructure patterns indicate a motivated operator with the capability to expand their targeting beyond the current scope. This raises concerns about the broader impact this malware could have if left unchecked.

To stay updated on the latest developments in cybersecurity and emerging threats like UnregStealer, follow reputable sources like IBM and The Daily Hodl on X, Facebook, and Telegram. Subscribe to email alerts for timely notifications and access The Daily Hodl Mix for a curated blend of news and insights.

Stay vigilant and protect yourself from cyber threats in an increasingly digital world. Remember, staying informed is the first step towards safeguarding your online security.

[Image Credit: Midjourney]