‘Hand Of Thief’ Trojan Targets Linux Users’ Bank Accounts

Russian underground crooks are selling a Trojan on dark web forums targeting bank accounts of Linux OS users, offering full services around it too.

The Hand of Thief malware is selling at $2,000 (£1290) but currently has limited functionality with form grabbers and some backdoor capabilities. But RSA, EMC’s security arm, believes it will be updated to gain web injection capabilities, to “graduate to become full-blown banking malware in the very near future”.

When that happens, the price will rise to  $3,000. Another $550 will have to be paid for every major release after that.

Linux malware

The underground seller claimed to have tested the Trojan on 15 different Linux distributions, including the hugely popular Fedora and Debian versions.

The malware harvests logins, before sending them to a MySQL database along with other data, including related websites, POST data and timestamps.

RSA was surprised to see Linux malware selling for such a high price, given the comparatively lower use base of the open source OS and its frequent security updates.

“Since Linux is open source, vulnerabilities are patched relatively quickly by the community of users. Backing this up is the fact that there aren’t significant exploit packs targeting the platform,” said Limor Kessem, cyber intelligence expert at RSA, in a blog post.

“In fact, in a conversation with the malware’s sales agent, he himself suggested using email and social engineering as the infection vector.

“Does Hand of Thief represent the early signs of Linux becoming less secure as cyber crime migrates to the platform?”

What do you know about Internet security? Find out with our quiz!

Thomas Brewster

Tom Brewster is TechWeek Europe's Security Correspondent. He has also been named BT Information Security Journalist of the Year in 2012 and 2013.

Recent Posts

Elon Musk Orders FSD Demo For Every Tesla US Sale

Fallout avoidance? Tesla buyers in the US must be shown how to use the FSD…

28 mins ago

Amazon Pumps Another $2.75 Billion Into Anthropic

Amazon completes its $4bn investment into AI firm Anthropic, after providing an additional $2.75bn in…

2 hours ago

The Sustainability of AI

While AI promises unparalleled efficiency, productivity, and innovation, questions regarding its environmental impact loom large.…

5 hours ago

Trump’s Truth Social Makes Successful Market Debut

Shares in Donald Trump’s social media company rose about 16 percent after first day of…

5 hours ago

Dutch PM Raises Cyber Espionage Case With China’s Xi

Beijing visit sees Dutch Prime Minister Mark Rutte discuss cyber espionage incident with Chinese President…

6 hours ago

Vodafone Germany Confirms 2,000 Job Losses, Amid European Restructuring

More downsizing at Vodafone after German operation announces 2,000 jobs will be axed, as automation…

22 hours ago