PandaLabs reports: bank trojans are evolving into more dangerous forms

9th April 2007

20% of all trojans detected by Panda ActiveScan in 2006 turned out to be bank trojans. Bank trojans developed for stealing financial information are evolving rapidly. One of the recent copies trojan StealAll.A, embeds in Web-browser DLL-library to steal the information entered by users in online regimes. As PandaLabs reports, 53.6% of new malicious software aroused in 2006, are trojans. And 20% of all trojans detected by Panda ActiveScan in 2006 are bank trojans. Exactly this category of trojans has been met most frequently during the analysis. Such rapid development of bank trojans is easily explained by the fact that financial institutions are undertaking additional security measures today, for example, they insert virtual keyboards to be protected against traditional keyboard spyware which register the keys pressed by user. But cybercriminals manage to be a few steps ahead of such security measures. Just a few months ago, PandaLabs detected Banbra.DCY â€“ bank trojan developed to record video shots in order to see what letters the user types on a virtual keyboard. Another widespread technology is used by trojans intended for farming. This fraud lies in a secret change of DNS address, which usually indicates to the user the path to web-pages, sending the user to fake banking and financial pages, which are intercepting confidential data typed by the user. Banker.CHG is a typical example of trojan developed specifically for farming.