poker malware

Originally Posted by houtlijm

thnx a lot for this post. i'll update antivirus asap

Originally Posted by jj20002

2Ninja is a Russian malware product that is targeting the online poker industry. It uses the I2P shadow internet to allow peer to peer communication and access users’ privately stored information—the authors even promise help desk support.

InfoSecurity Magazine said: “While some malware offerings have offered an interface with a support team in the past (Citadel and Neosploit to name two), i2Ninja’s 24/7 secure help desk channel is a first.”

According to a post on a Russian cybercrime forum, the software allows buyers to grab information from forms and emails, and includes “PokerGrabber” which works with “the most popular clients – 888poker, Absolute Poker, Cake Poker, Full Tilt Poker, Party Poker, PokerStars, Titan Poker.”

The inclusion of Absolute Poker which collapsed over two years ago suggests that the list is out of date.

Kaspersky Lab malware researcher Dmitry Tarakanov told PCWorld.com the malware will likely be distributed via the “usual methods” including “spam emails, drive-by-download attacks launched from websites infected with exploit kits and by direct installation through existing botnets.”

Once the malware is installed on a system, the culprit can access the internet from the infected computer to disguise his true identity and location. Information collected, either online or from the infected computers is then encrypted and sent back to the malware owner.

I2P is a “a networking layer that uses cryptography to allow secure communication between its peer-to-peer users.” It is a means of getting around internet surveillance by the authorities.

The advice, as always is to ensure that anti-virus and anti-malware programs are up to date, be alert to any unusual activity on banking, poker and social media accounts and whenever possible use a dedicated computer exclusively for playing online poker.

source: pokerfuse

Originally Posted by etherghost

That won't help. What you need to make sure is that you don't click any links which will initiate communication with the servers which have the ability to transfer malicious code to your computer via legitimate "conversations" (aka. http sessions).

To put it in plain english, avoid torrent and porn sites as much as possible. (especially russian based servers) That's where they embed much of their initial trojan content which then opens vulnerability vector to infect your machine with more serious infections like i2Ninja.

Also, make sure your firewall is set to NOT ACCEPT incoming connections EVER.

Originally Posted by kidkvno1

Proof to back up what you're saying ?????


Proof to back up what you're saying???
Virus scanners, look for all virus's.

Originally Posted by etherghost

Hey kidvno1,

i2Ninja is not exactly a virus. It is a trojan horse. It masquarades itself as legitimate data to infect victim's computer. Most of the time, trojans enter victim's computer by being legitimately downloaded with another piece of software and are undetectable by virus scanners.

They are also spread by a method known as "social engineering" where you are enticed to click a link to infected web pages where the trojan resides. It will then enter your computer by the means of HTTP or HTTPS. As you may or may not know, virus scanners do not scan web content.

Another fact to point out is that this "i2Ninja" malware has not been caught in action yet and there are no known signatures to be able to detect the malware.

Therefore I repeat once again, avoid surfing in the dark places of the Net.

You can read what a trojan horse is here: http://en.wikipedia.org/wiki/Trojan_horse_%28computing%29

Originally Posted by kidkvno1

I've had a few trojan horse virus's, with the right programs they can be killed.
I even had one of the worse trojan horse virus, in my system and i still killed it, the only other way to remove it, was doing a clean re-install of the OS.

Originally Posted by etherghost

That won't help. What you need to make sure is that you don't click any links which will initiate communication with the servers which have the ability to transfer malicious code to your computer via legitimate "conversations" (aka. http sessions).

To put it in plain english, avoid torrent and porn sites as much as possible. (especially russian based servers) That's where they embed much of their initial trojan content which then opens vulnerability vector to infect your machine with more serious infections like i2Ninja.

Also, make sure your firewall is set to NOT ACCEPT incoming connections EVER.

Originally Posted by S3mper

How the HELL are we suppose to do that?!?!?!

Originally Posted by etherghost

I don't know. Get a girlfriend? Visit local strip clubs?

On the serious side though, there are many "russian hosted" sites which are infested with malware. You click you risk!

Originally Posted by etherghost

Personally, I don't see the point of porn watching. Frankly, I think it's disgusting to watch two or more people moving their behinds back and forth, sweating all kinds of disgusting fluids everywhere and faking orgasms. LOL! Seriously, get a girlfriend (or three)

Originally Posted by S3mper

Sounds expensive

Originally Posted by Nick pokerfuse

and, ideally, have a separate machine just for poker.

Originally Posted by Nick pokerfuse

Please, i'd appreciate it if entire articles are not copy and pasted here. We can't afford to keep writing quality articles if they are rehosted elsewhere, and we need to protect our copyright. Copying a couple of paragraphs is fine, but we'd appreciate a link back to the source. Thanks

To those saying updating AV - as etherghost correctly says, this probably won't do any good. Standard AV products are useless against malware like this. Personally, I think they give a false sense of security (i don't use one myself). You need to practice proper browsing habits, protect your hardware (e.g. never leave your poker laptop in public - or in your hotel room!) and, ideally, have a separate machine just for poker.

Originally Posted by Nick pokerfuse

To those saying updating AV - as etherghost correctly says, this probably won't do any good. Standard AV products are useless against malware like this. Personally, I think they give a false sense of security (i don't use one myself).Now that's just dumb, i bet you have loads of malware on your computer. You need to practice proper browsing habits, protect your hardware (e.g. never leave your poker laptop in public - or in your hotel room!)This is not the same as malware! and, ideally, have a separate machine just for poker.

Originally Posted by kidkvno1

There are programs, that will block web sites, if one bit of malware is on them!

Originally Posted by Quasimodo

Etherghost, I'm not real savvy with desk tops or threads for that matter. So for some reason I'm going to you to ask this favor. I started a thread today but the only way I can find it is 'find all threads started by Quasimodo' Could you please kindly navigate to my thread...Screwy tech problems......and take that thread where it can be easily viewed by others? If not, would some one else kindly tackle this for me. I can't help it if I'm stupid.

Originally Posted by Evildrum

So its the porn sites that are costing my winrate! Should have known.