Trusteer is warning of a pure Zeus 2.0 botnet that is targeting customers of UK financial institutions.
According to V3.co.uk, the botnet is specifically going after UK citizens and their financial information. Zeus 2.0 not only gathers typical information like log-ins and passwords for banking sites, but also data that could be used for social engineering, like place of work and job role.
Says Amit Klein, chief technology officer at Trusteer:
What is especially worrying is that this botnet doesn’t just stop at user IDs and passwords … By harvesting client-side certificates and cookies, the cyber criminals can extract a lot of extra information that can be used to augment their illegal access to those users’ online accounts.