BanKey.A and BankFake.A: new wave of theft of bank data

15th June 2007

New Trojans were detected in the Internet, designed for stealing bank data, PandaLabs reports. BanKey.A and BankFake.A are the representatives of malicious software, the work of which you can not even imagine. During the start both Trojans open the page of online bank offering you enter your data for access to the account. If the user agrees, then he sees immediately the message about a mistake with apologizes for the temporary inconvenience and then it is redirected to the original site of the bank. Thus, the swindlers are concealing successfully their fraud. â€œThe danger of these Trojans is in the fact that they can be very easily modified, in order to forge the pages of different banks, payment systems, online casinos and othersâ€ Luis Corrons notes, the technical director of PandaLabs. The infection happens through distribution of Trojans via e-mail or internet-references. Besides, BankFake.A can be downloaded through the Trojan Downloader.OPY. â€œThis kind of malicious codes has a variety of advantages for cyber-criminals in comparison with traditional phishing attacks. Firstly, they are very easy in use, because the developers donâ€™t have to rent hosting service for location on them fake web-pages. And as there is no need of hosting â€“ thereâ€™s no threat track, and due to this, the success of crimes is totally independent from external providersâ€, explains Luis Corrons.