CERT-In Observes that Bladabindi Virus is Poisioning Indian Cyberspace

THE ECONOMIC TIMES reported on 24th July, 2014 stating that Computer Emergency Response Team-India (CERT-In) have warned Indian Internauts about a hacking efforts of a secret multi-identity computer virus - Bladabandi- which embezzles sensitive personal data of users for illegal purposes.

CERT-In especially is the nodal national agency to fight phishing, hacking and to strengthen security-related defenses of Indian Internet domain.

CERT-In said that the virus could contaminate Microsoft Windows OS (Operating system) and spread via removable drives or USB (Universal Serial Bus) flash drives like data cards and pen drive including additional malwares.

It has been witnessed that the malware variants, namely Bladabindi are spreading to steal sensitive information of users from infected machines. The virus could also be employed as malware downloader to circulate more malware and grants backdoor entry to the remote cybercriminal.

THE ECONOMIC TIMES published news on 24th July, 2014 quoting an explanation of the agency as saying that some of the variants of Bladabindi could also act as keylogging software, capturing key press and control the camera of the computer to send crucial information to remote attacker.

CERT-In has said that Bladabindi virus can use up to 12 false identities to mask its real identity and moreover it can also be easily created through a malicious hacker tool which is available publicly.

It has been reported that it steals your name, country, OS version, Windows username and more importantly saved passwords on Mozilla Firefox and one of its properties is to bypass firewalls.

CERT-In has suggested that users should not open attachments and unsolicited web links in email messages and visit unknown websites as countermeasures against "Bladabindi". The agency also recommends using strong passwords and enabling firewall at desktop and gateway level to protect their data from attacks.

Digit.in published news on 25th July, 2014 quoting an advisory of the agency as "Scan computers with free of charge removal tools, use clean USB or vaccinated software, disable the Autorun function available in Windows, deploy updated anti-virus and anti-spyware signatures at gateway level and desktop and keep up to date vulnerabilities and fixes on the OS system and application software."

» SPAMfighter News - 8/1/2014