Bankpatch Trojan warning
- Tue, 3 Feb 2009
- Comment on this article
A banking Trojan that steals your bank account details has been spotted by security researchers.
The Bankpatch Trojan is difficult to detect once it has infected a PC as it deletes all traces of its installation, experts at security firm Symantec said.
When the Trojan is installed on your PC, it can track when you are using the Internet Explorer browser, and if you were to log on to a specific bank's website, the Trojan could take over your PC and redirect your login information and account details to cybercriminals.
"Once executed on the machine, Bankpatch will add code to multiple Windows system files and patch key routines so that when these routines are executed, execution is redirected to the injected code," said Symantec's Eric Chien.
The Trojan is not actually new - having first been seen in 2007, but the malware now seems to be singling out Denmark for attack, though Greece, the US, Iceland and Ireland have all seen the Trojan recently.
Some activity has been reported in other parts of Europe including the UK though not at the levels seen elsewhere.
Symantec said that you could pick up the Trojan from visiting specially created websites hosting malware.
If you think you may have been infected, Symantec offers a tool to help you remove the Bankpatch Trojan.
www.symantec.com





Comments
Latest comments
No comments posted. Be the first by posting yours below...