ICT Security-Sécurité PC et Internet

RSA executives Art Coviello and Tom Heiser kicked off RSA Conference Europe, addressing outdated security models, practices and technologies holding back security teams from effectively protecting their organizations against evolving risks and...

“More companies every day are acknowledging that in order to survive in this new era of attacks we all have to accept the fact that bad guys are in our network. Period,” Heiser said.

Read more, a MUST:

http://www.securityweek.com/rsa-executive-keynote-we-all-have-accept-fact-bad-guys-are-our-network

The Citadel Trojan was first introduced for sale to cybercriminals in the Russian-speaking underground in February 2012. The Trojan, which was initially based on the Zeus Trojan’s exposed source code, is already at its second upgrade release, version 1.3.3.0, which was shared with its customer-base on March 15th.

One of the features included in the initial report and communicated by Citadel’s developers in late February related to a Trojan feature the developers have apparently implemented: DNS Redirection.

Per the feature list, the developer claims that unlike other Trojans, Citadel does not modify the “Hosts” file on the infected PC (all too often used for local Pharming), but rather allows the botmaster to block or redirect any URL they wish to prevent the bot from reaching.