Password-stealing Trojan Snares Spanish Speakers
All MSN
Messenger users take note. This trojan horse tried to swipe swipe
Spanish speakers' online banking usernames and passwords. The name
of this trojan is Nabload.u
Security vendor Panda has given this trojan horse "orange" alert,
very near to "red" alert.
Nabload.u is downloaded when unsuspecting
users click on the URL within an instant message that arrives from
an MSN Messenger contact; the Trojan downloads a second piece of
malware, dubbed "Banker.bsx," to the compromised PC.
Banker.bsx monitors the machine, and steals passwords and usernames
for ten online banks, including Venezolano de Credito, Banco
Provincial, and Banco Universal.
"This Trojan is an example of a hybrid virus that mixes different
techniques. Once the user clicks on the URL, it is able to download
a Trojan and use techniques similar to some spyware and phishing
attacks," said Luis Corrons, the director of Panda's research lab,
in a statement. "It is designed to steal data quickly, and without
leaving any tracks."
Even banks that use graphics-based techniques to protect users --
such as a clickable onscreen keyboard -- in an attempt to trick
traditional keyloggers are at risk from Banker.bsx, added
Corrons.
This trojan can even overcome
the graphics-based technique that protects users, shows that it is
not simple. Although it affected the Spanish, it may also affect
others, please be careful.
Again, you have been warned. I bear no consequences if you
anyhow clicked a link in MSN Messenger
