Researchers tracking a gang of online bank thieves found that the criminals have deployed a devious means to thwart law enforcement and anyone else trying to monitor their activities.
The gang behind the URLZone trojan, which siphons money from online bank accounts and then
alters a victim’s online bank statement to hide the fraud, have also devised a method to hide the accounts of mules they use to launder the siphoned funds.
Researchers at RSA’s FraudAction Research Labs say the gang was aware that their malware was being tracked by investigators, so they programmed their command and control server to
generate non-mule accounts to make it more difficult for law enforcement and fraud investigators to halt laundering through the real accounts.
