IDG News Service – A variant of the Sykipot Trojan Horse hijacks U.S. Department of Defense (DoD) smart cards in order to access restricted resources.
“We recently discovered a variant of Sykipot with some new, interesting features that allow it to effectively hijack DoD and Windows smart cards,” said Jaime Blasco, a security researcher at AlienVault, in a blog post. “This variant, which appears to have been compiled in March 2011, has been seen in dozens of attack samples from the past year.”
Smart cards interface with computers through a special reader. They use digital certificates and PIN codes for authentication purposes.
Sykipot is commonly used in advanced persistent threat (APT) attacks. According to Blasco, the Sykipot variant recently analyzed by AlienVault contains several commands to capture smart card information and use it to access secure resources.