A new Trojan called Briz.A

[Tim]

From the PandaLabs Newsletter;

February 24, 2006 - PandaLabs has detected a new Trojan called
Trj/Briz.A, whose main aim is to steal personal user data from affected
computers. This code stands out because it specializes in stealing bank
details and data from web forms and that its author customizes the code
for hackers.

The code creation system gives hackers the option to generate a Trojan
that cannot be detected by any antivirus protection, as the author
checks it every day. In spite of this, TruPrevent(tm) Technologies
incorporated in Panda Software's solutions have detected this code
without needing to be able to identify it first.

Apart from the code, cyber-crooks that buy this crimeware also get a
complex system for controlling the status of the infection caused by the
custom Trojan. This allows the client to get a list containing a large
quantity of data about the infected computers: IP addresses, passwords
and even the physical location of the computers. In this way, the
cyber-crooks can always have their malicious activity under control.

PandaLabs is working, along with other companies to analyze and close
all the sites related to this Trojan.

The file that causes the Trj/Briz.A infection is called "iexplore.exe"
It uses this name to pass itself off as Internet Explorer. When it is
run, it downloads different files and stops and deactivates Windows
Security Center services and Shared Internet Access. It also collects
information on programs like Outlook, Eudora and The Bat, which it sends
to the attacker.

To make it difficult to detect and disinfect the Trojan, it also modifies
the hosts file to prevent access to websites related to antivirus products.

This Trojan is the most complex example of the business network based on
malware. Where as hackers used to create malicious code to simply have
fun, they now have direct financial goals, designing their creations
based on a criminal business model.

[encoder]

Wow, just as new viruses arise in our physical, so are the viruses in the virtual world.

Bird Flu is the latest in our society and in the Internet, trojans are becoming more lethal to programs. Just be sure that the antivirus is always updated so your computer can cope up on more advanced viruses and trojans.