'Spy Banker Telax' Trojan Stealing Banking Credentials Through Facebook And Google Cloud Servers

[Lucian Armasu]

Zscaler researchers found a new strain of the old Spy Banker trojan that infects Brazilian users through social engineering on Facebook and by hosting the payloads on Google Cloud Servers.

'Spy Banker Telax' Trojan Stealing Banking Credentials Through Facebook And Google Cloud Servers : Read more

 

[f-14]

i actually noticed this one back around june when dealing with a client, i installed alot of ad blocker software that blocks the 3rd party links over their network first before studying the actual problem figuring it was just the amount of people using porn sites. yes the porn sites are infected also for example youporn, but those were redirecting to other porn sites for the most part, and fishing for email for the most part; and weren't where my trace routes were leading to.
i know for a fact the 404 not found errors didn't start until mid to late september FME while i kept investigating as my site black list was causing discord amongst the ranks in their workplace, which i did not count on due to the prevalence of mobile device alternatives. security is still a work in progress in brazil as employers are learning the hard way about employee's leaching internet via their mobile phones.
p.s. blocking skype altogether for organizations outside of europe or north america will probably lose your contract. (i was just covering the bases)