NCA Warn UK Internet Users Of 'Significant' New Malware Threat

The National Crime Agency (NCA) has urged UK internet users to protect themselves against a "significant strain of malicious software" that has enabled criminals to steal millions of pounds from UK bank accounts.

Dridex malware, also known as Bugat and Cridex, has been developed to harvest online banking details, which are then exploited to steal money from individuals and businesses around the world, the NCA said.

Global financial institutions and a variety of different payment systems have been particularly targeted, with UK losses estimated at £20m.

Some members of the public may also have unwittingly become victims of the Dridex malware and the National Crime Agency is encouraging all internet users to ensure they have up to date operating systems and anti-virus software installed on their machines, to protect themselves from further cyber crime attacks.

Computers become infected with Dridex malware when users receive and open documents in seemingly legitimate emails. The NCA assesses there could be thousands of infected computers in the UK, the majority being Windows users.

Users are urged to visit the CyberStreetWise and GetSafeOnline websites where a number of anti-virus tools are available to download to help clean up infected machines and get advice and guidance on how to protect themselves in the future.

The National Crime Agency is conducting activity to 'sinkhole' the malware, stopping infected computers – known as a botnet - from communicating with the cyber criminals controlling them. This activity is in conjunction with a US sinkhole, currently being undertaken by the FBI.

Mike Hulett, Head of Operations at the National Crime Agency's National Cyber Crime Unit (NCCU) said: "This is a particularly virulent form of malware and we have been working with our international law enforcement partners, as well as key partners from industry, to mitigate the damage it causes. Our investigation is ongoing and we expect further arrests to made.

Executive Assistant Director Robert Anderson from the FBI said:

"Those who commit cyber crime are very often highly-skilled and can be operating from different countries and continents. They can and will deploy new malware and we, along with our partners, are alive to this threat and are constantly devising new approaches to tackle cyber crime.

"We urge all internet users to take action and update your operating system. Ensure you have up to date security software and think twice before clicking on links or attachments in unsolicited emails".

"Cyber criminals often reach across international borders, but this operation demonstrates our determination to shut them down no matter where they are. The criminal charges announced today would not have been possible without the cooperation of our partners in international law enforcement and private sector.  We continue to strengthen those relationships and find innovative ways to counter cyber criminals."

(MH/CD)