ATLANTA — SecureWorks recently announced the availability of a tool designed to fight Torpig, one of the most widely used Trojans designed to steal financial information.The free tool, called Untorpig, can read logs of Trojan activity and reverse the encryption to allow incident response personnel to see what sensitive information the Trojan delivered to the attacker's server.The SecureWorks research team obtained samples of the Torpig Trojan and reverse engineered the encryption algorithm. Torpig is used to change any information transmitted between a Web browser and a Web server in any HTTP session, even those encrypted by TLS/SSL. Torpig steals passwords, logs key strokes, tracks web browsing, and finds usernames, passwords, credit card numbers, Social Security numbers and other key personal information."The Torpig Trojan is notorious for stealing financial data and is behind some of the most successful hacking schemes ever launched. Torpig is extremely sophisticated, down to encrypting the data it steals," said Don Jackson, director of threat intelligence for SecureWorks.Untorpig will locate and test for valid encryption keys from various sources in the log data and change keys as necessary to decrypt all of the stolen information, will automatically handle Torpig HTTP traffic logs in various formats and can decrypt data in aggregate logs."With Untorpig, incident responders will have an automated process for quickly decrypting the data it has stolen, thus allowing security professionals to implement protective measures in an expedient manner," Jackson said.Untorpig is available for download from the security tools page under the research section of the SecureWorks Web site, www.secureworks.com/research/tools/untorpig.–[email protected]

NCUF Ike Relief Donations at $147,000