Dridex malware crippled by the FBI

On Tuesday, October 13, The United States Department of Justice announced that they had taken down and seized multiple command-and-control (C&C) servers that were part of a network used by the Dridex trojan to upload stolen information and distribute malware.

U.S. Attorney Hickton said, “Through a technical disruption and criminal indictment we have struck a blow to one of the most pernicious malware threats in the world.”

Dridex, also known as ‘Bugat’ and ‘Cridex’, is a malicious trojan used by criminals to steal bank login credentials from an infected PC, in order to gain access to a victim’s bank account—it’s been quite successful too, with losses in the UK estimated at £20 million and in the US at $10 million.

Dridex is commonly distributed in the form of a phishing email, and often contains an infected Word doc attachment. When a victim opens the Word document they unknowingly infect their PC, thereby allowing attackers to eavesdrop on their computer’s activity and automate the theft of data.

Head of Operations at the National Crime Agency’s National Cyber Crime Unit (NCCU), Mike Hulett, said: “This is a particularly virulent form of malware and we have been working with our international law enforcement partners, as well as key partners from industry, to mitigate the damage it causes. Our investigation is ongoing and we expect further arrests to be made.”

While the FBI and other international agencies continue their investigations, UK’s National Crime Agency (NCA) is still warning UK internet users to be aware of and protect themselves against Dridex.

Even though the distribution network has been crippled, the actual malware still exists and can be used by other criminals.

Mike Hulett goes on to provide sound advice for everyone, “We urge all internet users to take action and update your operating system. Ensure you have up to date security software and think twice before clicking on links or attachments in unsolicited emails”.

If you don’t already have a suitable antivirus solution in place, we recommend you install one today. Download our award-winning AVG Protection for your PC to help prevent malware and viruses.

 


If you or anybody you know has been affected by cybercrime fraud you can report it to:

US
Federal Bureau of Investigation, Internet Crime Complaints Center
http://www.ic3.gov/default.aspx

UK
ActionFruad – National Fraud & Cyber Crime Reporting Centre
http://www.actionfraud.police.uk

AUS
ACORN – Australian Cybercrime Online Reporting Network
https://report.acorn.gov.au

The channel opportunity to reduce security complexity

According to PwC’s latest Information Security Breaches Survey a staggering 74 per cent of small businesses have suffered a security breach in the last year—jumping significantly from the 60 per cent recorded in 2014.

Aside from the monetary losses suffered, the damage to reputation can be incalculable. The topic of data security is higher on the media’s agenda than ever before and the resulting bad press from any security breach today can severely impact a business’s reputation and credibility.

It’s clear that SMBs need to take immediate action, but what’s holding them back? The answer is not just money but time. Discussing small business vulnerability in a recent article in the UK newspaper The Times, journalist Mark Frary called out one of the underlying problems as follows:

“One of the barriers to implementing cyber security is the amount of management attention it takes. SMEs are naturally focused on profit and loss and cyber security can seem less relevant than other challenges.” 

Time management issues shouldn’t be the reason for neglecting security. That’s where AVG Business channel partners come in. This is an opportunity for our partners to add new value for clients, removing the complexity of multiple, different security solutions.

Solutions such as AVG CloudCare can help partners easily implement security strategies for their clients.  AVG CloudCare offers a single cloud platform that enables the real-time management of a full suite of cloud-based security services including antivirus and online backup (OLB), among other key features.

Brookland Computer Services (BCS), an AVG Business channel partner serving clients in finance, legal, manufacturing and accounting, has found AVG CloudCare’s security products fit well in the ICT provider’s business model. BCS Managing Director Eamonn Fogarty explains, “With the old method of purchasing antivirus, you just hope It worked because no one could check it. Businesses were potentially left unprotected. Using AVG CloudCare, we can monitor and control every device and every environment, with reduced workload for us and our clients’ internal IT people.”

Another AVG Business channel partner, Northern IT Consultancy (NITC), is using CloudCare’s security portal to manage clients’ security services from a single screen dashboard. NITC Managing Director Ritesh Mehta commented that it has improved control and flexibility, and provides a straightforward product they can resell at a competitive price, “Threats are detected and the remote management means we don’t have to go onsite to fix the problem or interrupt the client. They’re very happy with that and our client retention speaks volumes.”

If you haven’t heard about AVG CloudCare or the portfolio of security and managed IT services from AVG Business, visit our AVG Business website today.

Protect sensitive documents and data with AVG’s Data Safe

If you need to protect sensitive files or documents on your PC, you’re going to want an extra layer of security. AVG’s Data Safe feature can help.

Data Safe encrypts and stores your valuable documents, pictures or any other files onto a password-protected virtual disk on your PC. You can move files into your Data Safe and open them just like any other disk.

The contents of your AVG Data Safe are protected using AES 256-bit encryption. Once the Data Safe is locked it needs a password to be opened, without the password it’s not possible to access the contents—so your documents will remain protected.

AVG Data Safe is available in:

How to create a Data Safe

 

  • Open AVG.
  • In the AVG interface, click the Computer tab
  • On the Data Safe tab, click Create Safe.
  • Create a name for the Safe
  • Fill in the Password twice—for verification. Make it strong and memorable.
  • Fill in the Password hint. Remember: If you forget your password you will not be able to access your files!
  • Click Next.
  • Select a Location and the Size of the vault, review the other options.
  • When you’re happy with your choices, click Create Safe.

Once the Safe has been created, click the Open Now button. If the safe isn’t already unlocked, fill in your password to unlock the safe for the first time. The safe will now be accessible via the selected drive letter in Windows Explorer.

How to lock your Data Safe

  • Open AVG.
  • In the AVG interface, click the Computer tab, and then click Manage your Safes.
  • Click the Unlocked slider next to the safe you want to lock. The status will change from unlocked to locked, and the Data Safe virtual drive will be disabled.

If you want to try AVG’s Data Safe feature for yourself, download a 30-day trial of AVG Internet Security. If you have multiple PCs and devices, you can protect and mange them all with AVG Protection PRO.

For more great tips on getting the most out of your PC, Mac and mobile devices, follow us on Twitter and Facebook.