Business Security Information

Crimeware is a form of of malware (malicious software) that is  used to attack your computer and/or network.  Crimeware is designed for one purpose which is to facilitate illegal or criminal activity.

This type of software is often used to commit identity theft.  Also, crimeware allows attackers to capture and export sensitive information which they can sell or use to exploit for some other type of financial gain.  Another common type of crimeware includes phishing kits that allow an attacker with little or no technical skill to launch a phishing attack.  This type of crimeware may include website development software, content for the site, and spamming software that will allow the attacker to send out mass e-mails to their phishing targets.

Crimeware can use keystroke loggers to collect sensitive information such as login information for on-line bank accounts or e-commerce accounts and then send this information back to the criminal over the internet or network.  Crimeware programs can also redirect a web browser to a fake website which is controlled by the criminal.  The website can then try to exploit some vulnerability on the computer or capture log-in information as the user tries to log-in.  Also, some forms of crimeware will monitor the user’s computer, and when they log-in to a bank or other financial account, the criminal will drain their account of funds while the user is logged in.  The capabilities of crimeware are changing continuously and are limited sometimes only by the skills of the programmer writing the software.

Crimeware can be installed on a computer through vulnerabilities in web applications, operating systems or other types of applications, and through e-mails that use social engineering to get the user to open the attachment.  Also, crimeware, like so many forms of malware, can be installed using peer-to-peer file sharing networks.  As mentioned many times before, be a little paranoid and be careful what you download,  what e-mails you open, and what websites you visit.  As always, keep your computer updated and use software that can scan your computer for all known types of malicious software including viruses and spyware.

Related posts:

1. Changes in Spear Phishing Attacks
2. Malware
3. Rootkits