sysflash / New-Citadel-Malware-Variant-Targets-Payza-Online-Payment-Platform

Man in the Browser (MitB) malware has been targeting online payment platforms since day one. While popular payment services such as Paypal are constantly being targeted by most malware, smaller payment systems are now popping up on cybercriminals’ radar. Trusteer’s security team recently analyzed a Citadel malware variant that targeted, among others, Payza – a payment platform popular in developing countries that have limited access to online financial services. Payza states its mission is “to provide our customers with the world’s first truly global payment platform, to bring affordable and convenient payment methods to under-serviced markets, and to connect the global marketplace with emerging countries.” There are several security concerns with financial services in developing countries: (a) the wide use of Internet cafes and public computers, and (b) the lack of online security awareness. Together, these conditions can have serious implications. Public computers are typically at higher risk for malware infections and when used by an unsuspecting user, the chances of a successful fraudulent transfer are much higher