"You cannot find peace by avoiding life"

Adeline Virginia Woolf (1882- 1941) English novelist
(March 28, 1941, Virginia Wolf dies)

The Nabload.DLU Trojan hides behind a funny video to steal bank details

PandaLabs, Panda Security's malware detection and analysis laboratory, has reported the appearance of Nabload.DLU, a Trojan that passes itself off as a funny video to trick users while it downloads another malicious code to steal passwords of online banking services. The process is as follows:

The Trojan reaches the targeted computer as a greetings video. When the user opens the file, the Trojan loads a funny video from the Internet, while simultaneously downloading another malicious code: Banker.LRX. This malware is designed to steal login credentials for several online banking entities.

You can watch a video showing what the targeted user would see while being infected: http://www.youtube.com/watch?v=OaQhFhVX6yI

Nabload.DLU also modifies the Windows Registry in order to activate every time the user restarts the computer. This way, it ensures it is always active on the system.

Trojans are the main means used by cyber-crooks to steal victims' private data, in this case their online banking details. According to a study carried out by PandaLabs, over 240,000 users in Spain and 11 million users around the world fell victim to identity theft in 2008. For more information, check out the following press release: http://www.pandasecurity.com/homeusers/media/press-releases/viewnews?noticia=9601

"This type of Trojan is usually distributed in emails or Web pages that offer false video downloads. We'd like to remind users that they shouldn't run files received by email from unknown sources. Also, they should be extra cautious when downloading files from the Internet, and always scan them with an antivirus before running them", explains Luis Corrons, Technical Director of PandaLabs.

More information about the Nabload.DLU Trojan in the Panda Security Virus Encyclopedia http://www.pandasecurity.com/homeusers/security-info/about-malware/encyclopedia/overview.aspx?idvirus=207374

You can receive the Panda Security news automatically by adding this URL (http://feeds2.feedburner.com/pandasecurity) to your feed reader.

For up-to-date computer security news go to the Panda Security Twitter.