[ news_security_news ]
Crimeware Trojan Detected
SecurityProNews
Staff Writer
2006-03-21
 Insider Reports RSS Feed
PandaLabs has detected a new Trojan called Trj/Briz.A, whose main aim is to steal personal user data from affected computers. This code stands out because it specializes in stealing bank details and data from web forms and that its author customizes the code for hackers.
The code creation system gives hackers the option to generate a Trojan that cannot be detected by any antivirus protection, as the author checks it every day.
Apart from the code, cyber-crooks that buy this crimeware also get a complex system for controlling the status of the infection caused by the custom Trojan. This allows the client to get a list containing a large quantity of data about the infected computers: IP addresses, passwords and even the physical location of the computers. In this way, the cyber-crooks can always have their malicious activity under control.
PandaLabs is working, along with other companies to analyze and close all the sites related to this Trojan. The file that causes the Trj/Briz.A infection is called "iexplore.exe" It uses this name to pass itself off as Internet Explorer.
When it is run, it downloads different files and stops and deactivates Windows Security Center services and Shared Internet Access. It also collects information on programs like Outlook, Eudora and The Bat, which it sends to the attacker.
To make it difficult to detect and disinfect the Trojan, it also modifies the hosts file to prevent access to websites related to antivirus products.
This Trojan is the most complex example of the business network based on malware. Where as hackers used to create malicious code to simply have fun, they now have direct financial goals, designing their creations based on a criminal business model.
TruPrevent Technologies incorporated in Panda Software's solutions have detected this code without needing to be able to identify it first.
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
