Explainer: How do you know if you've been hacked with Blackshades?

Australian authorities have joined a co-ordinated global crackdown on computer hackers, but what is the Blackshades malware they've been targeting?

blackshades_aap.jpg

Two people photograph a map after a press conference by Preet Bharara, United States attorney for the Southern District of New York, where he discussed charges against suspected computer hackers related into an international malware group called Blackshades in New York. (AAP)

 

The homes of hackers in Australia, Canada, Asia and Europe have been raided and computers seized as authorities worldwide crackdown on users of malware called Blackshades.

What is Blackshades?

Blackshades is malware, or software designed to disrupt a computer system, which allows users to access remote computers. It is described as a remote administration tool (RAT).

According to the FBI, the malware was used to steal passwords and banking credentials, hack into social media accounts, as well as access documents, photos, and other computer files. The program could also record all keystrokes; activate webcams to spy on victims and “hold a computer for ransom”.

Alastair MacGibbon tells Greg Dyett what you can do to protect yourself against malware


The software was sold in underground online hacking marketplaces for $US40 to $US100 from at least 2010, distributed to thousands of people in more than 100 countries.

It’s estimated that more than half a million computers worldwide have been infected.

How do you know if your computer is infected?

The FBI has issued a for people wishing to check if their computer has been infected.

  • Mouse cursor moves erratically with no input from user
  • Web camera light unexpectedly turns on when web camera is not in use
  • Monitor turns off while in use
  • Usernames and passwords for online accounts have been compromised
  • Unauthorised logins to bank accounts or unauthorised money transfers
  • Text-based chat window appears on your computer’s desktop unexpectedly
The following files, known to be present on Blackshade-infected computers, may also be present.

  • dos_sock.bss
  • nir_cmd.bss
  • pws_cdk.bss
  • pws_chro.bss
  • pws_ff.bss
  • pws_mail.bss
  • pws_mess.bss
Users can by updating antivirus software, creating strong passwords and using a pop-up blocker.

People are also advised to only download software from trusted sites and not to open e-mail attachments in unsolicited e-mails.
fbi_blackshades.jpg
The FBI has released this heat map showing where the 700,000 victims of Blackshades are located around the world. (FBI)

What are authorities doing?

Forty FBI field officers have conducted approximately 100 interviews, , and seized more than 1,900 domains used by Blackshades users to control victims’ computers.

Australian authorities have also.

*Anyone who gets positive results is encouraged to submit a complaint to the  and include the term “Blackshades” in the incident description.

 


Share
2 min read
Published 20 May 2014 10:03am
Updated 20 May 2014 3:39pm
Source: World News Australia, SBS

Share this with family and friends