A second tax software program associated with the Chinese banking industry has now been found to contain an embedded backdoor that secretly grants attackers SYSTEM-level privileges.
In late June, researchers from Trustwave SpiderLabs reported that accounting software called Intelligence Tax, developed by Chinese information security company Aisino Corporation and distributed to global clients of an unidentified Chinese bank, was trojanized with “GoldenSpy,” a malware capable of executing an array of Windows commands as well as arbitrary code.
Now these same researchers are warning of “GoldenHelper,” another backdoor malware that was found in a program called Golden Tax Invoicing Software (Baiwang Edition), which Trustwave says is also developed by Aisino, through its subsidiary NouNou Technology. According to Trustwave, GoldenHelper is actually a precursor to GoldenSpy.
Strangely, there is a company called Baiwang that also develops Chinese VAT invoicing software, but Trustwave found no official connection between Golden Tax and that company, despite the allusion to a Baiwang Edition in the name of the software.
Chinese banks require their clients to use Golden Tax for value-add ..
Support the originator by clicking the read the rest link below.
