Things to know about Gauss malware

Last Thursday, Kaspersky Labs announced the discovery of a new malware called Gauss, which specialized in stealing information about bank accounts, finance, and connections to malicious codes like Stuxnet and Flame.

Things to know about Gauss malware Picture 1

Here is what to know about this dangerous malware:

Characteristics

According to Kaspersky Labs' representative, Gauss is a complex spy software made up of Flame, Stuxnet has spread in Iran and the Middle East earlier this year. However, unlike viruses that serve network warfare, Gauss's main purpose is to steal bank information. Kaspersky said it found it on the Lebanese, Citibank and PayPal systems. And its main line is espionage, not theft.

Operating system infection

Gauss mainly infects Windows 32 bit versions. It also has separate spy modules spread over USB drives on 64-bit systems. In addition, some of its modules do not work with Windows 7 Service Pack 1. Gauss does not infect Mac and Linux operating systems.

The most infected area

Almost all known incidents occur only in the Middle East. Kaspersky has detected 1,660 cases in Lebanon, 483 in Israel, and 261 in Palestinian territory. Although there were 43 cases discovered in the US, Kaspersky suspected that these computers were once in the Middle East, and merely used VPNs or anonymous networks. Kaspersky collected 2,500 templates, but only those using Kaspersky antivirus products, but the actual number is definitely higher.

Operation time

Kaspersky said the malware has been in operation since September 10 last year and has been shut down since July this year.

Is Gauss dangerous for users in the world?

According to Kaspersky representatives, this capability is not much, mainly in some regions and countries, especially in the Middle East because it is not like other spreading viruses.

If the user suspects that his computer has been infected with Gauss, he or she can visit this site to check. This is a page that Kaspersky provides free to detect and destroy malicious code.

Isabella Humphrey

Update 26 May 2019

You should read it

May be interested

Learn about polymorphic malware and super polymorphism
as mentioned in previous articles, malware (malware) has become a big problem. unrighteous people are taking advantage of ransomware, keyloggers, bank trojans and cryptojacker to redeem themselves from the victims.
What is Goldoson Malware? How can you protect yourself?
an example of malware is goldoson. the malware has infected more than 60 legitimate google play apps, which have been downloaded more than 100 million times in total.
What is rooting malware? What can you do to protect yourself?
rooting malware works by gaining root access to the victim's phone. this gives the malware more control over the phone.
Some simple tricks to deal with Malware
malware seems to become more and more intelligent and causes more incalculable consequences than before. installing malware detection tools (malwarebytes, hijackthis, combofix ...) on the computer is not a redundant task. but in some cases, for many reasons (blocked by malware itself) these tools are
What is Malware Joker? How to fight Malware Joker?
joker malware is another threat to your privacy and sensitive information. recently, it attacked android mobile devices globally, resulting in the need to remove some applications from the google play store.
5 types of malware on Android
malware or malware can affect mobile devices as well as computers. a little bit of knowledge and proper precautions can protect you from threats like ransomware and sextortion scam.
Modular Malware - New stealth attack method to steal data
some malware variants can use different modules to change the way they affect the target system. so what is modular malware and how does it work?
CCleaner has been hacked, attached malware, things to know and how to fix it
an unknown hacker group attacked ccleaner's infrastructure and added malware to the 32bit versions of ccleaner 5.33.6162 and ccleaner cloud 1.07.3191.
What is malware analysis? How are the steps taken?
what is malware analysis? in what situations do we need to conduct malware analysis? how is the malware analysis process implemented?
Binder and Malware (Part 3)
in the previous two sections we have configured and built the malware with binder yab. now will observe and execute this malware. in the perspective we will begin to implement what this executed piece of malware looks like and the behavior of n