X

Thank you for sharing!

Your article was successfully shared with the contacts you provided.

ATLANTA — SecureWorks recently announced the availability of a tool designed to fight Torpig, one of the most widely used Trojans designed to steal financial information.The free tool, called Untorpig, can read logs of Trojan activity and reverse the encryption to allow incident response personnel to see what sensitive information the Trojan delivered to the attacker’s server.The SecureWorks research team obtained samples of the Torpig Trojan and reverse engineered the encryption algorithm. Torpig is used to change any information transmitted between a Web browser and a Web server in any HTTP session, even those encrypted by TLS/SSL. Torpig steals passwords, logs key strokes, tracks web browsing, and finds usernames, passwords, credit card numbers, Social Security numbers and other key personal information.“The Torpig Trojan is notorious for stealing financial data and is behind some of the most successful hacking schemes ever launched. Torpig is extremely sophisticated, down to encrypting the data it steals,” said Don Jackson, director of threat intelligence for SecureWorks.Untorpig will locate and test for valid encryption keys from various sources in the log data and change keys as necessary to decrypt all of the stolen information, will automatically handle Torpig HTTP traffic logs in various formats and can decrypt data in aggregate logs.“With Untorpig, incident responders will have an automated process for quickly decrypting the data it has stolen, thus allowing security professionals to implement protective measures in an expedient manner,” Jackson said.Untorpig is available for download from the security tools page under the research section of the SecureWorks Web site, www.secureworks.com/research/tools/untorpig.–lsiegriest@cutimes.com

NCUF Ike Relief Donations at $147,000

Peter Westerman

Credit Union Times

Join Credit Union Times

Don’t miss crucial strategic and tactical information necessary to run your institution and better serve your members. Join Credit Union Times now!

  • Free unlimited access to Credit Union Times' trusted and independent team of experts for extensive industry news, conference coverage, people features, statistical analysis, and regulation and technology updates.
  • Exclusive discounts on ALM and Credit Union Times events.
  • Access to other award-winning ALM websites including TreasuryandRisk.com and Law.com.

Already have an account? Sign In Now
Join Credit Union Times

Copyright © 2019 ALM Media Properties, LLC. All Rights Reserved.