http://www.websitemagazine.com/content/blogs/web-hosting/archive/tags/carberp/default.aspxTags: carberpenCommunityServer 2008 SP2 (Build: 31104.93)http://www.websitemagazine.com/content/blogs/web-hosting/archive/2010/12/11/carberp-beating-two-factor-authentication.aspxSat, 11 Dec 2010 17:30:00 GMT1e469e21-c924-44fa-a132-47b5d0a8ad47:15615Pete Prestipino0http://www.websitemagazine.com/content/blogs/web-hosting/rsscomments.aspx?PostID=15615http://www.websitemagazine.com/content/blogs/web-hosting/archive/2010/12/11/carberp-beating-two-factor-authentication.aspx#comments<hr /> <p><b><img height="80" width="80" src="http://www.websitemagazine.com/images/blog/trustdefender-mini.png" style="float:left;margin:15px;" alt="" />TrustDefender Labs has released an analysis into how the new Trojan Carberp infiltrates websites and highlights the impressive JavaScript injection code used. </b><br /><br /> Those behind Carberp spent time not just on the configuration file, but also making sure they have a method in place to compromise two factor authentication schemes. The Trojan uses heaviliy dynamic JavaScript hosted on a valid HTTPS website. <br /><br /> Andreas Baumhof, CTO of TrustDefender comments, &ldquo;The evolution of Trojans such as Carberp highlights how Trojans use complex behaviour to employ intelligent guises and commit fraudulent activity. Financial institutions and enterprises need to provide appropriate security, beyond traditional AV software to reduce the risks of fraudulent activity.&rdquo; </p> <div style="clear:both;"></div><img src="http://www.websitemagazine.com/content/aggbug.aspx?PostID=15615" width="1" height="1">trustdefendersecuritycarberptrojanvirus