Hackers have created a new version of the crimeware toolkit known as Zeus which is designed to appropriate login credentials for banks in Germany, Spain, the United States and the UK.
The malware, described by researchers with CA as “Zeus version 3,” is increasingly selective in its targets, with one variant targeting German and Spanish banks and the other targeting UK and U.S. financial institutions. Previous versions of the malware indiscriminately targeted any financial institution.
Zeus version 3 also has features that make it difficult for security researchers to understand the malware. Zombie drones linked the the botnet only receive information when needed, according to CA researchers.
“Organized cybercriminals spend development effort and technology to make its installation and infection persistent in the systems,” writes Zarestel Ferrer, a senior research engineer with CA.