Sophisticated botnet steals more than $47M by infecting PCs and phones
Behold—the Eurograbber, visualized. — Aurich Lawson / Thinkstock — A new version of the Zeus trojan—a longtime favorite of criminals conducting online financial fraud—has been used in attacks …
Context & Ripple Effects
Zeus has been a longtime favorite of criminals conducting online financial fraud, and the Eurograbber campaign applies that proven codebase at scale — more than $47M taken while infecting both PCs and phones, which puts mobile devices inside the fraud chain rather than beside it.
The story drew same-day pickup from CNET alongside Ars Technica's writeup, signaling that the dual PC-and-phone infection method, not just the dollar figure, is what caught the security press's attention.
First-order effects
- Banks whose customers were hit absorb direct fraud losses and the operational cost of account recovery, credential resets, and disputed transactions tied to the $47M siphoned by the botnet.
- Account holders on both desktops and smartphones face compromised banking credentials, forcing banks to treat phone-based sessions as potentially infected rather than trusted.
Second-order effects
- Banks are pushed toward authentication and transaction-verification measures beyond passwords, since Zeus-lineage fraud operates against customers who believe they are logging in normally.
- Security vendors gain demand for mobile-device protection as phones become part of the infection chain, opening a product line distinct from traditional desktop antivirus.
Third-order effects
- If PC-plus-phone campaigns become the template, online banking security restructures around the assumption that any device touching a bank session may be compromised, raising the baseline cost of authentication industry-wide.
- Zeus's persistence as a 'longtime favorite' among fraudsters points to criminal tooling behaving like maintained software — variants evolving faster than law-enforcement takedowns can retire them.
The trend: Online banking fraud is shifting from desktop-only trojans to campaigns that compromise PCs and phones together, with Zeus-lineage code serving as the recurring engine.