GameOver Zeus
GameOver Zeus is a sophisticated evolution of the ZeuS malware that cybercriminals created to steal usernames and passwords from users on infected systems.
GameOver Zeus, or GOZ, initially spread via a malicious spam and phishing campaign that sent out e-mails appearing to come from reputable organizations such as the Federal Reserve Bank, the Federal Deposit Insurance Corporation (FDIC) and the National Automated Clearing House Association (NACHA).
A link in these e-mails, if clicked upon, would open a fraudulent website where the GOZ malware would then be downloaded and run on the system, subsequently opening the infected computer for financial information and login credentials to be obtained.
Key Differences of GameOver Zeus vs. ZeuS
A key distinction between GameOver Zeus and the original ZeuS variants is that GOZ featured the additional capability to initiate denial-of-service (DoS) attacks via botnets as a form of subterfuge. A second difference is that the GameOver Zeus malware employed a P2P architecture for the operation of the malware, making it more difficult for authorities to track and shut down the cybercriminals’ activities.
Authorities were able to put an end to both GameOver Zeus and the CryptoLocker ransomware in mid-2014 following a multi-continent collaboration between law enforcement agencies, particularly the European Cybercrime Center (EC3), and security researchers to identify and shut down the GOZ botnet servers and infrastructure.
This effort followed two unsuccessful attempts in 2012 to disrupt and put an end to the GameOver Zeus infrastructure.
Read Also:
- Data Loss Prevention (DLP)
Data loss prevention, or DLP, refers to technology or software developed to protect and prevent the potential for data loss or theft. Data loss protection software is designed to monitor, detect and prevent the loss of data while it’s at rest, either in on-premises storage drives or in the cloud, as well as when it’s […]
- Cridex
Cridex is a sophisticated strain of banking malware that can steal banking credentials and other personal information on an infected system in order to gain access to the financial records of a user. The Cridex Trojan Horse spreads by copying itself to mapped and removable drives on infected computers. Cridex creates a backdoor entry point […]
- Web Scale IT (Web SCale Infrastructure)
Web-scale IT is the phrase used to reference a global-class of computing — or architectural approach — used to deliver the capabilities of large cloud service providers within an enterprise IT setting. The approach is to design, build and manage data center infrastructure where capabilities go beyond scale in terms of size to include scale […]
- Dridex Malware
Dridex is a strain of banking malware that leverages macros in Microsoft Office to infect systems. Once a computer has been infected, Dridex attackers can steal banking credentials and other personal information on the system to gain access to the financial records of a user. Dridex operates by first arriving on a user’s computer as […]
- Windows 10
Windows 10 is the latest release of Microsoft’s Windows operating system and the successor to the underwhelming Windows 8 (and Windows 8.1). Initially codenamed Windows Threshold, Windows 10 debuted on July 29, 2015, following a “technical preview” beta release of the new operating system that arrived in Fall 2014 and a “consumer preview” beta in […]