BitDefender discovers new banking trojan

16th December 2008

The anti-virus company BitDefender discovered a new type of malicious code.
The hacker program collects passwords for access to banking sites, typed by users of Firefox. The malware module Trojan.PWS.ChromeInject.A is located in the folder of additions for the popular browser, and runs with the opening of Firefox.
The program uses JavaScript to identify more than one hundred of popular sites holding money transactions, including Barclays, Wachovia, Bank of America and PayPal. Once the site is detected by the trojan, it collects user names and passwords and sends them on a server in Russia.
Users can catch the dangerous program, even without downloading it manually, as it can use a vulnerability in the browser for installation. Once launched, it registers itself in the Firefox system files as Greasemonkey.

MAPILab POP3 Connector: your mail client