GameOver Zeus, a member of the Zeus family of malware, has been discovered and disrupted by the Department of Homeland Security, Federal Bureau of Investigation, and Department of Justice. But, this is only a temporary respite from the danger the malware poses - in two weeks, the threat will be back, and very much alive.
Zeus, originally identified in 2011, is a group of malware that attempts to steal banking credentials from unsuspecting citizens. This particular Zeus malware is a peer-to-peer variant, meaning that it uses communication between computers to get around and create bots, or rather, "zombies," out of computers. According to the official statement from the United States Computer Emergency Readiness Team, GameOver Zeus "uses a decentralized network infrastructure of compromised personal computers and web servers to execute command-and-control."
In other words, this botnet can take control of your computer, and use it to create others just like it - a horde of zombie-like parasites that can send spam, steal sensitive information and credentials, and participate in distributed denial-of-service attacks (DDNS), in which it can prevent the intended user from receiving the experience expected from the software. It tricks the user into clicking on malicious emails or websites, spreading the infection to their computer.
Because this botnet uses peer-to-peer technology and communications, it is able to use its infected network to distribute data to others. What's even worse is that this network turns encryption to a sinister purpose - to stay hidden from view. This also contributes to how difficult it is to eliminate, as there is no central weakness which could bring about a point of failure.
How To Prevent Your Own GameOver Catastrophe
While it is difficult to stop outright, there are ways you can prepare for the oncoming horde of zombie-bots. Here are three pointers to keep yourself safe from infection:
- Keep your antivirus and anti-malware tools up to date. Utilizing antivirus software will help your computer identify the threat before it causes any trouble, and neutralize it. If your antivirus isn't up to date, your computer is at risk of infection and a number of other threats, including adware and spyware.
- Change your passwords, and change them often. There is a chance that your passwords have been compromised during the infection, so it is best to change your passwords as soon as possible. Overall, changing your passwords often is a good practice, and should be done every quarter or so - you know, just for good measure.
- Make sure your operating system and application software are up-to-date. Nothing screams vulnerability more than running an unpatched operating system or using applications that aren't updated.
For more updates on the latest security threats, contact Infradapt at 800.394.2301. We'll make sure that you are always aware of the dangers that loom on the horizon, and even better, we'll arm you with everything your business needs to combat the web-based apocalypse!