A trojan attack Pentagon

A modified version of Skyipot trojan was discovered. The malware attacks Common Access Card, ID cards that are used in Department of Defense to access confidantial networks and data. The trojan uses zero-day flaw in Adobe software to install keylogger and steal PIN of card. When the card is inside the reader attackers may steal data they want.
Skyipot doesn’t replicate automatically and has to be controlled on per user basis. The malware is used during spear-phishing attacks not for infecting entire networks.


Source: SC Magazine
20.01.2012