Check Point Software Technologies Ltd. has published ‘A Case Study of Eurograbber: How 36 million was stolen via malware’. The case study uncovers a highly sophisticated attack used to steal millions from corporate and private banking customers across Europe.
Eurograbber was launched against banking customers, using a sophisticated combination of malware directed at computers and mobile devices. The malware, in conjunction with the attackers’ command and control server, first infected the victims’ computers, and then, infected their mobile devices in order to intercept SMS messages to bypass the banks’ two-factor authentication process. With the stolen information and the transaction authentication number (TAN), the attackers then performed automatic transfers of funds, ranging between €500 and €250,000, from the victims’ accounts to mule accounts across Europe.
"Eurograbber is an excellent example of a sophisticated and stealthy attack. Custom designed and targeted threat attacks like Eurograbber is part of the community which is alive and motivated to create even more sophisticated attacks. Enterprises as well as individuals need to exercise caution and ensure they conduct important online business, especially financial transactions in the most secure environments possible. Users need to be steadfast in ensuring their data and devices have all possible security layers enabled and they are updated regularly to ensure the best protection possible," said, Bhaskar Bakthavatsalu, Regional Director- India and SAARC at Check Point Software Technologies.
Check Point provides protection for both enterprises and consumers against all types of threats. Check Point Threat Cloud feeds software blades with real-time intelligence and signatures enabling the gateways to identify and block attacks, including malware detection and bot communications, which are key elements of the Eurograbber attack.
