RTM is a virus that can intercept banking transactions to steal account data or to generate credit transfers or divert those made by legitimate owners to accounts managed by criminals. Discovered in 2017 by Kaspersky Lab is in 2018 that began to spread like wildfire, compromising 130,000 systems last year, a huge increase compared to just over 2000 victims of the previous year. According to Kaspersky the RTM rush shows no sign of diminishing and there are already 30,000 new infections detected since the first of January.
At present, the infected systems are mainly found in Russia but according to the antivirus manufacturer, its international diffusion can not be ruled out:
" Until now we have witnessed cases in which cyber threats were successfully used for the first time in Russia and then became international. The RTM banking trojan can easily become yet another example of the same development cycle. This is why we urge companies to become potential targets for this malware to take preventative measures and to ensure that their security products detect and stop this threat, "said Morten Lehn, Kaspersky Lab's General Manager Italy .
The measures that Morten talks about are quite obvious, but judging by the damage that RTM is doing, it's worth reiterating it once again .
- Education and training . RTM spreads through very targeted phishing emails. For this reason it is essential to ensure that all employees are informed about the risks represented by links and attachments. In particular those working in accounting departments that, in this particular case, are the most targeted.
- Update systems.
- Adopt a company policy for installing software that denies the ability to install from unknown sources.
- Use antivirus that can perform " behavior-based " analysis , such as Kaspersky Endpoint Security .