Olympic Vision is an advanced threat that can intercept users' keystrokes, clipboard data, and login credentials.
Cybercriminal groups, using a combination of advanced keyloggers and BEC (Business Email Compromise) attacks, are targeting, scanning and stealing user data from 18 countries around the world.
At the heart of this attack is a new malware family with keylogging and information-sniffing capabilities. Trend Micro researchers have given the malware the codename Olympic Vision.
Available on the dark web for just $25, this keylogger can do many things, such as monitor user keystrokes, record and intercept data from the clipboard, take screenshots, and extract passwords from browsers, emails, and FTP clients.
To spread malware, criminals employ well-designed email campaigns that target senior executives of businesses and organizations.
The campaign targets companies and businesses in Europe, North America and Asia. In total, attacks have been recorded in 18 countries, including Spain, Germany, Slovakia and a host of other countries such as China, India, Indonesia, Malaysia, Thailand, Canada, the United States, Iran, Iraq, the Netherlands, Qatar, Saudi Arabia, the United Arab Emirates, the United Kingdom and Zimbabwe.
This isn't the first time a keylogger has been used in conjunction with BEC scams. According to Mimecast, a cybersecurity firm specializing in email security, BEC scams increased by 55% in 2015 compared to the previous year.
