Add to the library

EN RU CN DE EN ES FR JP PL UA

News & Events | Promotions | Licensing center | Anti-cyber fraud center | Customers | Company

Doctor Web and ATM Trojans

Writers and distributors of malicious programs have long constituted an extensive and highly evolved criminal industry, which is why employees of anti-virus companies, who fight against virus threats, face real danger.

The day that Doctor Web published a news item about Trojan.Skimer.18 getting recorded in the company’s virus database (December 18, 2013), Doctor Web received a threat supposedly from the Trojan writers or criminal organization sponsoring this malware’s development and promotion:

WARNING!!!

On behalf of Syndicate we congratulate you with successful disassembly of NCR ATM software skimmer. The source code of writers is attached.

Good job but it’s prospectless. Profit from Dr.Web_ATM_shield is dirt-cheap because bankers never give money willingly. However the development of Dr.Web_ATM_shield threatens activity of Syndicate with multi-million dollar profit. Hundreds of criminal organizations throughout the world can lose their earnings.

You have a WEEK to delete all references about ATM.Skimmer from your web resource. Otherwise syndicate will stop cash-out transactions and send criminal for your programmers’ heads. The final of Doctor Web will be tragic.

On March 31, after two arson attacks were carried out on Igor Daniloff’s anti-virus laboratory in St. Petersburg, we received a second threat.

Dear Dr.Web, the International carder syndicate has warned you about avoidance of interference (unacceptable interference) in the ATM sphere. Taking into account the fact that you’ve ignored syndicate’s demands, we employed sanctions. To emphasis the syndicate’s purpose your office at Blagodatnaya st. was burnt twice.

If you don’t delete all references about atmskimmer viruses from your products and all products for ATM, the International carder syndicate will destroy Doctor Web’s offices throughout the world, In addition, syndicate will lobby the Prohibition of usage of Russian anti-viruses Law in countries that have representation offices of the syndicate under the pretext of protection against Russian intelligence service.

Incoming letters of this e-mai are being monitoring, arguments of this dispute will be specified.

Doctor Web considers it its duty to provide users with the ultimate protection against the encroachments of cybercriminals. Consequently, efforts aimed at identifying and studying ATM threats are in progress as is work to improve Dr.Web ATM Shield.