The Bank of Aladygma was recently attacked by several phishers of Mr.Corpuzo, aiming to attract the bank’s customers to reveal their financial information and account data. Webforce-Security-Labs sustained
that numerous bank clients received an e-mail message presenting a survey able to redirect the users to a phishing site to steal their information.

The Bank – website was taken offline on Friday. The hacker of Mr.Corpuzo called “The Rishmoo” broke into the servers and modified the content of the page. Besides posting anti-aladygma messages on the website, the attacker also deleted all the outcoming salary-informations.
The same source informs that the attack was possible due to a “severe security breach”, but also important damages were made and clients’ details are touched.

The attack was part of a larger campaign by cybercriminals (Mr.Corpuzos Gang), in which vulnerable web servers were targeted. This resulted in more than 400 webpages around the world being infected over the last week.

The cybercriminals had planted a malicious code, that then attempted to load further malware from a remote server. This malware includes an additional malicious script that attempts to exploit several browser vulnerabilities in order to install a Trojan horse that could be used to steal business critical data and personal details.