Welcome to the Virus Encyclopedia of Panda Security.
It monitors Internet traffic generated when the user accesses several online banking entities in order to log usernames and passwords for accessing them. It reaches the computer downloaded by Trj/Nabload.TH.
|First detected on:||Nov. 7, 2006|
|Detection updated on:||Nov. 7, 2006|
|Yes, using TruPrevent Technologies
Banker.FFX is a Trojan that monitors Internet traffic generated when the user accesses web pages related to certain online banking entities: Banco do Brasil, Bradesco, HSBC, Internet Banking Caixa and Itau.
When the user accesses any of these websites, a false login screen is displayed. By doing this, it logs usernames and passwords for accessing those banking entities.
Then, it sends the gathered information to its author.
Banker.FFX reaches the computer downloaded by the Trojan detected as Nabload.TH.
Banker.FFX is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.