Shylock Gang

Internet is vulnerable to malicious bits of software sent out to spy or steal. In 2011, a banking Trojan was detected that sneaked into the computers to drain the bank accounts. It was tricky since even after deletion it re-installed itself. The malware files had fragments of Shakespear from The Merchants of Venice. This discovery led to the naming of this malware — Shylock. By 2014, Shylock had infected 1 lac plus computers. Money was getting transferred from the UK accounts to Russian accounts. The Russian  nerds had created this malware. They were organised crimanals. The National Crime Agency ( NCA ) tied up with the agencies across the nations to tackle the menace, and also sought co-operation from Microsoft since the malware used its operating system. Several domain names in the servers that allowed talk to infected PCs were blocked. The US data in domain registry was diverted under court orders to Microsoft sinkhole set up to gather data. The gang was using legitimate websites to deliver the malware. Once inside the computer, the malware waited for a banking transaction. There was no way the investigators could reach registries for the old Russian sites. They got in touch with Eugene Kaspersky, from a Russian cyber security firm. They suspended 75 Shylock domains. The whole operation was called Operation Disputed. Since then, the malware has been wiped out, and there is no report of any losses from the banks. The Shylock gang, however, remains at large.

print

Leave a Reply

Your email address will not be published. Required fields are marked *