A week in security: malware targets banks and defence firms

Targeted malware has been aimed at various organisations this week

This week has been dominated by yet more cyber criminal activity targeting the banking and defence industries, as well as efforts by the government and vendor communities to counter these increasingly prevalent and sophisticated threats.

First up came a warning from security vendor G Data of a new threat to MSN Messenger and Windows Live Messenger. The firm's research found a recent surge in spam and phishing sites that link to the services, as well as a wave of seemingly "endless" fake friend requests.

Adding to these woes is a rogue application that promises to tell users who is blocking them, but in fact is a lure to a scam.

Security vendor Trusteer said it has spotted a malware attack that compromises user credentials by creating a fake bank log-in page and then uses those credentials to perform an 'authorised' monetary transfer.

The company warned UK banking customers to beware of the new threat, which is being spread through multiple infection methods, including web-based exploits and spam email attachments.

Meanwhile, researchers at Symantec Hosted Services uncovered a new attack on defence contractors. The operation involved compromising the site of one firm and using the hacked site to host a malware attack on another contractor. The sophistication and complexity of the attack was especially noteworthy, said the firm.

On the other side of the fence, positive noises came from the government this week in the form of security minister Baroness Pauline Neville-Jones.

Speaking at the Homeland and Border Security 2010 conference in London, Neville-Jones argued that cyber security and information assurance are essential to the UK's economic prosperity, and pledged that the government will work closely with the private sector on developing and implementing cyber security policy.