Mandiant Consulting and FireEye have discovered a new and previously unseen type of malware being used by a Russian, or Russian-speaking, criminal group they have dubbed FIN1. The gang used a specific ecosystem of malware that works its way into the lower-level components of a target's systems and is executed before the operating system boots; this makes it extremely difficult to detect. The malware, which FireEye has christened as "Olmarik", targets credit card data, which it then sends back to its command & control centre. Essentially this type of attack is an APT ('advanced persistent threat') that is capable of living and operating within large systems with little chance of detection.
Mandiant Consulting and FireEye have discovered a new and previously unseen type of malware being used by a Russian, or Russian-speaking, criminal group they have dubbed FIN1. The gang used a specific ecosystem of malware that works its way into the lower-level components of a target's systems and is executed before the operating system boots; this makes it extremely difficult to detect. The malware, which FireEye has christened as "Nemesis", targets credit card data, which it then sends back to its command & control centre. Essentially this type of attack is an APT ('advanced persistent threat') that is capable of living and operating within large systems with little chance of detection.