mushroom
Feb 9th 2005, 10:49 am
Banking Trojan disables MS Anti-Spyware
By John Leyden
Published Wednesday 9th February 2005 15:48 GMT
The first piece of malware to attack Microsoft's new prototype anti-spyware product has emerged. The BankAsh-A Trojan disables Microsoft AntiSpyware Beta in an attempt to suppress any warning messages the package might display. It also deletes files within the program's folder. Unlike other items of malware, BankAsh-A makes no attempt to turn off anti-virus apps.
The main function of BankAsh-A is to steal online banking passwords from unsuspecting Windows users. The Trojan targets users of UK online banks such as Barclays, Cahoot, Halifax, HSBC, Lloyds TSB, Nationwide, NatWest, and Smile. The malware records passwords and keystrokes once users of infected machines visit targeted websites. This data is then surreptitiously transmitted to crooks, allowing fraudsters to later empty bank accounts. Rather than spreading under its own steam, BankAsh-A needs by distributed by either spam emails or by loading it onto a maliciously constructed website. Anti-virus firms say they've received a handful of reports of the Trojan.
Story: http://www.theregister.co.uk/2005/02/09/banking_trojan/
By John Leyden
Published Wednesday 9th February 2005 15:48 GMT
The first piece of malware to attack Microsoft's new prototype anti-spyware product has emerged. The BankAsh-A Trojan disables Microsoft AntiSpyware Beta in an attempt to suppress any warning messages the package might display. It also deletes files within the program's folder. Unlike other items of malware, BankAsh-A makes no attempt to turn off anti-virus apps.
The main function of BankAsh-A is to steal online banking passwords from unsuspecting Windows users. The Trojan targets users of UK online banks such as Barclays, Cahoot, Halifax, HSBC, Lloyds TSB, Nationwide, NatWest, and Smile. The malware records passwords and keystrokes once users of infected machines visit targeted websites. This data is then surreptitiously transmitted to crooks, allowing fraudsters to later empty bank accounts. Rather than spreading under its own steam, BankAsh-A needs by distributed by either spam emails or by loading it onto a maliciously constructed website. Anti-virus firms say they've received a handful of reports of the Trojan.
Story: http://www.theregister.co.uk/2005/02/09/banking_trojan/