PandaLabs: bank trojans on the rise

9th April 2007

PandaLabs Company gave the users distressing statistics: the number of bank trojans is increasing steadily. According to statistics, such malicious modules amount 20% of all trojans detected by Panda ActiveScan in 2006. One of the most recent specimens of such trojans is StealAll.A, embeds in internet-browser DLL-library for stealing the information entered by users in online regimes. Such rapid development of bank trojans, PandaLabs specialists explain this that the financial institutions now take additional security measures, for example, they enter virtual keyboards for protection against traditional keyboard spies which register the keys clicked by the user. But cyber-criminals manage to be a few steps ahead such security measures. For example, a few months ago, there appeared trojan Banbra.DCY developed to record video-files in order to see what letters the user clicks in a virtual keyboard. Trojans intended on farming are using one more widespread technology. This fraud lies in a secret change of DNS address, which usually indicates to user the path to web pages, by directing them to fake bank and financial pages which are intercepting entered by user confidential data. A typical example of trojan developed especially for farming is Banker.CHG.