Swedish bank Nordea has suffered the biggest
internet fraud in history after more than eight million kronor
(around £576,000) disappeared as a result of tailor-made Trojans
launched by Russian criminals.
Up to 250 customers at Sweden's largest bank are thought to have
been hit by the attacks, which have taken place over three
months.
The attack worked by targeting Nordea's customers, who were asked
to download an anti-spam program. Anyone who downloaded the
'raking.zip' or 'raking.exe' files was infected by the 'haxdoor.ki'
Trojan.
The Trojan activated itself when users tried to log in to their
online account at the bank.
The software stole users' information before displaying an error
message asking the client to resend the data. Criminals then had
the two access codes needed to transfer money from the
account.
Despite having a list of 121 suspects, the bank and the Swedish
police have been unable to stop the attacks.
Police have discovered that the user information was sent to
servers in America, before being forwarded to Russia.
"This is a worrying concern for any online bank user, as the threat
of cyber-crime targeting 'safe' institutions becomes an ever more
real concern," said security firm McAfee in a statement.
McAfee recorded more than 17,000 phishing reports per month in
2006, and its research showed that 90 per cent of people are still
unable to recognise a well constructed phishing message.