Microsoft Windows<\/p>\n
Since mid-October 2014, a phishing campaign has targeted a wide variety of recipients while employing the Dyre\/Dyreza banking malware. Elements of this phishing campaign vary from target to target including senders, attachments, exploits, themes, and payload(s).[1]<\/a>[2]<\/a> Although this campaign uses various tactics, the actor\u2019s intent is to entice recipients into opening attachments and downloading malware.<\/p>\n The Dyre banking malware specifically targets sensitive user account credentials. The malware has the ability to capture user login information and send the captured data to malicious actors.[3]<\/a> Phishing emails used in this campaign often contain a weaponized PDF attachment which attempts to exploit vulnerabilities found in unpatched versions of Adobe Reader.[4]<\/a>[5]<\/a> After successful exploitation, a user’s system will download Dyre banking malware. All of the major anti-virus vendors have successfully detected this malware prior to the release of this alert.[6]<\/a><\/p>\n Please note, the below listing of indicators does not represent all characteristics and indicators for this campaign.<\/p>\n Phishing Email Characteristics:<\/span><\/strong><\/p>\n System Level Indicators (upon successful exploitation):<\/span><\/strong><\/p>\n A system infected with Dyre banking malware will attempt to harvest credentials for online services, including banking services.<\/p>\n Users and administrators are recommended to take the following preventive measures to protect their computer networks from phishing campaigns:<\/p>\n US-CERT collects phishing email messages and website locations so that we can help people avoid becoming victims of phishing scams.<\/p>\n","protected":false},"excerpt":{"rendered":" Systems Affected Microsoft Windows Overview Since mid-October 2014, a phishing campaign has targeted a wide variety of recipients while employing the Dyre\/Dyreza banking malware. Elements of this phishing campaign vary from target to target including senders, attachments, exploits, themes, and … Continue reading Description<\/h3>\n
\n
\n
\n
Impact<\/h3>\n
Solution<\/h3>\n
\n