P2011-ND-026

On March 16, 2011, the Organization discovered a new generation Qakbot virus on its network. The virus accessed information that the employees themselves had entered when they used their work computers to access the internet, including if they accessed the computer for personal reasons. The virus also captured live key stroke data entered during the time the virus was active. The Organization’s forensic investigation determined the virus focused on capturing and transmitting personal account information entered into internet based forms. Other types of information entered while the virus was active were not accessed.