It is designed to steal users' banking details belonging to a certain Brazilian banking entity. It reaches the computer in a phishing message which seems to have been sent by such banking entity.

Windows 2003/XP/2000/NT/ME/98/95

Banker.MBX is a Trojan designed to steal users' banking details belonging to a certain Brazilian banking entity. In order to do so, it passes itself off as the update of a program of such banking entity necessary to continue making Internet banking movements.

Banker.MBX reaches the computer in an email message (phishing) which seems to have been sent by such Brazilian banking entity.

Banker.MBX is easy to recognize, as it reaches the computer in a phishing message that seems to have been sent by certain Brazilian banking entity. The message informs users that for security reasons they have to update the version of the online banking program before a certain date or if not the access to their account will be blocked.

It is distributed in an email message like the following:

This message contains a link to the update of the program. However, the link points to the download of a program that imitates the banking entity's appearance and that will require users to enter their banking data.

The icon of the downloaded file contains the name of the affected bank: