BanKey.A and BankFake.A: new wave of theft of bank data

15th June 2007

New Trojans were detected in the Internet, designed for stealing bank data, PandaLabs reports. BanKey.A and BankFake.A are the representatives of malicious software, the work of which you can not even imagine. During the start both Trojans open the page of online bank offering you enter your data for access to the account. If the user agrees, then he sees immediately the message about a mistake with apologizes for the temporary inconvenience and then it is redirected to the original site of the bank. Thus, the swindlers are concealing successfully their fraud. “The danger of these Trojans is in the fact that they can be very easily modified, in order to forge the pages of different banks, payment systems, online casinos and others” Luis Corrons notes, the technical director of PandaLabs. The infection happens through distribution of Trojans via e-mail or internet-references. Besides, BankFake.A can be downloaded through the Trojan Downloader.OPY. “This kind of malicious codes has a variety of advantages for cyber-criminals in comparison with traditional phishing attacks. Firstly, they are very easy in use, because the developers don`t have to rent hosting service for location on them fake web-pages. And as there is no need of hosting - there`s no threat track, and due to this, the success of crimes is totally independent from external providers”, explains Luis Corrons.