Panda Security

Nu luras nätbedragarna med betet att rädda de chilenska gruvarbetarna som sitter fast.

Pressmeddelande   •   Sep 02, 2010 15:54 CEST

 Rescue of Chilean miners used as new lure by banker Trojan, reports PandaLabs

 -       Banbra.GUC is designed to steal user details when visiting certain bank pages, including those of Banco Santander and Banco do Brasil

-       This is a new variant of a family of Trojans that has been active since 2003

Madrid, September 2 2010

PandaLabs, Panda Security’s anti-malware laboratory, has uncovered a new malicious code, Banbra.GUC, which lures users with a video about the rescue of the trapped Chilean miners (you can see an image on Flickr at: http://www.flickr.com/photos/panda_security/4950289127/). This is a new variant of the infamous Banbra family of banker Trojans, which first emerged in 2003. 

When run, the Trojan displays the video while it delivers its malicious payload. More specifically, the Trojan is designed to steal passwords for online banking services. Among the banks affected are Banco Santander and the Banco do Brasil. If a compromised user visits any of the pages in question, Banbra.GUC downloads some executables that simulate the bank’s page. Once the user has entered their login details, the executable closes and redirects the user to the genuine Web page of the bank. The Trojan then sends all this information to its creator via email.

 “This is a particularly dangerous Trojan, as in addition to stealing bank details it installs other malware which the cyber-criminals can control”, warns Luis Corrons, Technical Director of PandaLabs. “Users must be very careful, as this type of Trojan is usually distributed in email messages or on social networks with links that seem to point to a YouTube video. However, they actually download the Trojan to the PC. In this case the Trojan does play the video to avoid raising any suspicion while infecting users”, explains Corrons.

 

More information is available in the PandaLabs blog: http://www.pandalabs.com

About PandaLabs

Since 1990, PandaLabs’ mission has been to detect and eliminate new threats as rapidly as possible to offer our clients maximum security. To do so, PandaLabs has an innovative automated system that analyzes and classifies thousands of new samples a day and returns automatic verdicts (malware or goodware). This system is the basis of collective intelligence, Panda Security’s new security model which can even detect malware that has evaded other security solutions.

Currently, 99.4% of malware detected by PandaLabs is analyzed through this system of collective intelligence. This is complemented through the work of several teams, each specialized in a specific type of malware (viruses, worms, Trojans, spyware, phishing, spam, etc), who work 24/7 to provide global coverage. This translates into more secure, simpler and more resource-friendly solutions for clients.

More information is available in the PandaLabs blog: http://www.pandalabs.com

Panda Security grundades 1991 och är världens ledande leverantör av molnbaserade säkerhetslösningar. Produkterna finns på 23 språk och har miljoner användare i 200 länder världen över. Panda Security var det första IT-säkerhetsföretaget att erbjuda kraften i molnteknologi via sin Collective Intelligenceteknologi. Den här innovativa säkerhetsmodellen kan automatiska analysera och klassificera tusentals fall av ny skadlig kod varje dag, vilket garanterar kunder det mest effektiva skyddet med minimal prestandapåverkan. Nyligen lanserades också ett gratis antivirus i molnet; det ultralätta Panda Cloud Antivirus. Panda Security har 56 kontor världen över med ett amerikanskt huvudkontor i Kalifornien och ett europeiskt huvudkontor samt centrum för forskning i Spanien (Madrid och Bilbao). För mer information, gå till: www.pandasecurity.com.