Virgin Media tracks Zeus Trojan using white hats

ISP to use Shadowserver Foundation intelligence

ISP Virgin Media is now using organisations such as The Shadowserver Foundation to work out which of its customers might be part of botnets spreading the dangerous Zeus online banking Trojan.

If a third-party identifies a suspect connection, the company will then write to the affected customer outlining how they can remove Zeus using online tools or through the company's paid-for Digital Home Support service.

This process hands the work of removing Zeus and other malware to the Virgin Media Security security software package that comes with Virgin's ISP package, which currently uses the BitDefender antivirus engine, one of the few reliably able to detect the latest versions of the malware.

It is unusual for an ISP to admit to using third-party organisations to detect botnets, but perhaps Zeus is now serious enough to break convention. Last week, in only its latest detected attack, UK-US company M86 Security revealed that Zeus v3 had successfully hacked the online bank accounts of 3,000 UK customers of a large high-street bank, stealing just over $1 million.

The company does not make any widespread use of internal botnet detection technology or if it does it won't say so for fear of making users wary of covert monitoring.

"We don't identify the spread of botnets ourselves because that could be an invasion of privacy," said a source at Virgin Media.

"We're writing to customers we've been told may be infected by malware, encouraging them to check their computers have an up to date security package, such as Virgin Media Security, and offering advice on simple and free ways to disinfect their computer," added Jon James, executive director of broadband at Virgin Media.

"For those who need a little bit more help we also have our fee-based Digital Home Support service which fixes problems using the latest cutting edge remote control technology," he said.

BitDefender has made a speciality of Zeus detection so its anti-Zeus credentials are currently good. Other security companies are not believed to be doing such a good job, which raises the bigger question of how customers can block Zeus in the first place. The Trojan also targets a number of common vulnerabilities in widelyused programs which many users either haven't patched or simply don't grasp need patching at all.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags bitdefenderSMEM86 SecurityPersonal Tech

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

John E Dunn

Techworld
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Ada Chan

Dynabook Portégé X30L-G

I highly recommend the Dynabook Portégé® X30L-G notebook for everyday business use, it is a benchmark setting notebook of its generation in the lightweight category.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Featured Content

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?