Explainer: How do you know if you've been hacked with Blackshades?

Australian authorities have joined a co-ordinated global crackdown on computer hackers, but what is the Blackshades malware they've been targeting?

Two people photograph a map after a press conference by Preet Bharara, United States attorney for the Southern District of New York, where he discussed charges against suspected computer hackers related into an international malware group called Blackshades in New York. (AAP)

 

• Australians targeted in hacker raids

The homes of hackers in Australia, Canada, Asia and Europe have been raided and computers seized as authorities worldwide crackdown on users of malware called Blackshades.

What is Blackshades?

Blackshades is malware, or software designed to disrupt a computer system, which allows users to access remote computers. It is described as a remote administration tool (RAT).

According to the FBI, the malware was used to steal passwords and banking credentials, hack into social media accounts, as well as access documents, photos, and other computer files. The program could also record all keystrokes; activate webcams to spy on victims and “hold a computer for ransom”.

Alastair MacGibbon tells Greg Dyett what you can do to protect yourself against malware

The software was sold in underground online hacking marketplaces for $US40 to $US100 from at least 2010, distributed to thousands of people in more than 100 countries.

It’s estimated that more than half a million computers worldwide have been infected.

How do you know if your computer is infected?

The FBI has issued a checklist* of possible indicators for people wishing to check if their computer has been infected.

• Mouse cursor moves erratically with no input from user
• Web camera light unexpectedly turns on when web camera is not in use
• Monitor turns off while in use
• Usernames and passwords for online accounts have been compromised
• Unauthorised logins to bank accounts or unauthorised money transfers
• Text-based chat window appears on your computer’s desktop unexpectedly

The following files, known to be present on Blackshade-infected computers, may also be present.

• dos_sock.bss
• nir_cmd.bss
• pws_cdk.bss
• pws_chro.bss
• pws_ff.bss
• pws_mail.bss
• pws_mess.bss

Users can protect their computer by updating antivirus software, creating strong passwords and using a pop-up blocker.

People are also advised to only download software from trusted sites and not to open e-mail attachments in unsolicited e-mails.

The FBI has released this heat map showing where the 700,000 victims of Blackshades are located around the world. (FBI)

What are authorities doing?

Forty FBI field officers have conducted approximately 100 interviews, executed more than 100 e-mail and physical search warrants, and seized more than 1,900 domains used by Blackshades users to control victims’ computers.

Australian authorities have also joined the crackdown.

*Anyone who gets positive results is encouraged to submit a complaint to the FBI’s Internet Crime Complaint Center, and include the term “Blackshades” in the incident description.