Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Why Tinba Trojan Is Now a Global Concern - SANS Internet Storm Center SANS ISC InfoSec Forums

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Why Tinba Trojan Is Now a Global Concern
Quoting InfoRiskToday: Tinba, which has been linked to attacks in the U.S., Canada and Europe, is now targeting bank accounts in Russia, according to a new report from Dell SecureWorks. Researcher Brett Stone-Gross tells why Tinba is unusual and can be tough to detect.
The InfoRisk Today article cites Dell SecurWorks research at:…

Mapping the IP addresses of Tinba 2.0 infections observed at a sinkhole on 2015-10-05 to their locations revealed the following top 10 affected countries:

Russia (34.5%)
Poland (22.0%)
Indonesia (7.2%)
Spain (6.5%)
Canada (5.6%)
Romania (5.0%)
Germany (2.6%)
Australia (1.8%)
United Kingdom (1.8%)
Japan (1.7%)

From what I can tell, that's a one-day snapshot, and I'm curious to see stats on a larger dataset. Still, it's interesting to see what the campaigns using the Tinba banking Trojan have been targeting.

ISC Handler

Sign Up for Free or Log In to start participating in the conversation!