Trojan virus can hack into smart cards

Trojan virus can hack into smart cards

Smart cards, which communicate with SSL certificates and PIN codes for authentication purposes on eCommerce websites, may be susceptible to virus attacks. IT World Canada said a variant of the Sykipot Trojan Horse virus can cause a security breach.

The website said Sykipot is used in advanced persistent threat attacks and this variant may have the ability to capture smart card information and use it to secure resources. The virus uses card certificates on a victim's computer, steals the PIN and uses the information to get into protected resources.

"We recently discovered a variant of Sykipot with some new, interesting features that allow it to effectively hijack DoD and Windows smart cards," said Jaime Blasco, of AlienVault, in a blog post on his company's website. "This variant, which appears to have been compiled in March 2011, has been seen in dozens of attack samples from the past year."

Companies looking to increase data security should make sure they have high assurance SSL certificates to protect their own websites and the customers who submit payment through them.