x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Banker.CJA

Threat LevelHigh threatDamageSevereDistributionNot widespread
Common name:Banker.CJA
Technical name:Trj/Banker.CJA
Threat level:Medium
Type:Trojan
Effects:  

It obtains data from several online services, as it prevents users from accessing the legitimate website of their bank and at the same time it displays a false website when users log in them. It reaches the computer downloaded by Trj/Nabload.CC.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:March 20, 2006
Detection updated on:Nov. 9, 2006
StatisticsNo
Proactive protection:
Yes, using TruPrevent Technologies

Brief Description 

    

Banker.CJA is a Trojan that obtains data from several online services. In order to do so, it follows the routine below:

  • It monitors if users access websites belonging to several banking entities.
  • If users enter their data in order to log in any of them, Banker.CJA prevents users from accessing them.
  • Instead, it displays a false website that imitates the original one.
  • If users enters their data again thinking that there has been an error, Banker.CJA obtains confidential user data, such as username and password.
  • Then, it sends the data it has gathered using the POST method of the HTTP protocol to certain URLs.

Banker.CJA reaches the computer downloaded by Trj/Nabload.CC.

Visible Symptoms 

    

Banker.CJA is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.