Malware of this country is stealing details of Indians' ATM card

Ahmedabad. September 26, 2019, Thursday

The bank account holder of India is reported to have stolen ATM card information from malware. This malware was developed by the Lazarus Group of North Korea.

North Korea's primary intelligence bureau is controlled by the Reconstruction General Bureau, the Lazarus Group. The Lazarus group was first debated in 2014 when it was attacked by Sony Pictures Entertainment. The group also launched a WannaCry ransomware attack in 2017 on several countries, including the United States and Britain.

Zakov, a security researcher with the Kaspersky Global Research and Analysis team, said Lazarus is an unusually sponsored group of state-sponsored groups. The group focuses on cyberspace or subbot operations, but in many cases has also been exposed to a malware attack that aims to steal money only.

Researchers at Kaspersky have identified ATMDtrack, a banking malware. The malware was targeting Indian banks in 2018. The malware was specifically designed to plant in Victim's ATM card, from which it can read and store data on the card installed in the machine. Later, the data of account holders can easily be stolen using this data.

The investigation identified more than 180 new malware

More than 180 new malware have been identified in the investigation, which found code sequences similar to ATMDtrack but were not intended to target ATM cards. It is used for the Spy Tool 'Dtrack' according to individual listings. Files could be uploaded or downloaded to Victim's system using 'Dtrack', which could be recorded even when users pressed a button, as long as the Mavenape Remote Administration Tool (RAT) worked.