"Gauss" Malware a Cyber-Espionage + Banking Trojan out in the wild

A new malware, “Gauss” targeting users in the Middle-East has been discovered. Initiated by the International Telecommunication Union (ITU) following the discovery of Flame, Kaspersky Lab experts have discovered this new cyber threat which is a complex, nation-state sponsored cyber-espionage toolkit designed to steal sensitive data with a specific focus on browser password, online banking account credentials, cookies, and specific configurations of infected machines.

ITU-IMPACT’s partner, Kaspersky Lab, have developed the removal tool to be used to remove this malware from infected systems. This tool, Kaspersky Virus Removal Tool Special ITU Edition,  removes Gauss, Flame, Stuxnet, Duqu and all other known malicious programs. The link contains the tool itself and a user manual. Please note that you have to launch the tool twice for the full recovery from the Gauss malware. The tool is now made available by ITU-IMPACT and Kaspersky Lab and can be download via the FTP site below:

In order for you to get this tool please download it from our site: http://cloud.impact-alliance.org/ 

Username           :country

Password            :Welcome1 

Once you click on the link, the download will start and you will get a .rar file (archived file format). This archived file contains the tool itself. However, the tool is quite intuitive and user friendly. 

You will need to:

1.    unzip the file
2.    install the application
3.    run through the scan
4.    Follow instructions if any malware is detected
5.    Check manual if you find any difficulty 

The archive is protected by a password: Rzj3Uvu5OEcg7YKm 

Attached with this email is a document “Gauss QA” which explains some of the queries you might have while trying to mitigate this threat. Please go through the details for more in-depth knowledge about this malware.