Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: Why Tinba Trojan Is Now a Global Concern - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Why Tinba Trojan Is Now a Global Concern
Quoting InfoRiskToday: Tinba, which has been linked to attacks in the U.S., Canada and Europe, is now targeting bank accounts in Russia, according to a new report from Dell SecureWorks. Researcher Brett Stone-Gross tells why Tinba is unusual and can be tough to detect.
InfoRiskToday
The InfoRisk Today article cites Dell SecurWorks research at: secureworks.com/resources/tips-and-articles/featured_articles/…

Mapping the IP addresses of Tinba 2.0 infections observed at a abuse.ch sinkhole on 2015-10-05 to their locations revealed the following top 10 affected countries:

Russia (34.5%)
Poland (22.0%)
Indonesia (7.2%)
Spain (6.5%)
Canada (5.6%)
Romania (5.0%)
Germany (2.6%)
Australia (1.8%)
United Kingdom (1.8%)
Japan (1.7%)

From what I can tell, that's a one-day snapshot, and I'm curious to see stats on a larger dataset. Still, it's interesting to see what the campaigns using the Tinba banking Trojan have been targeting.
Anonymous


ISC Handler

Sign Up for Free or Log In to start participating in the conversation!