x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Banker.MAI

Threat LevelLow threatDamageHighDistributionNot widespread
Common name:Banker.MAI
Technical name:Trj/Banker.MAI
Threat level:Medium
Type:Trojan
Effects:  

It steals the banking data of users when they access the website belonging to certain banking entities. It reaches the computer in an email message in Portuguese which requires users to confirm certain data.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:Dec. 7, 2009
Detection updated on:Dec. 22, 2009
StatisticsNo

Brief Description 

    

Banker.MAI is a Trojan designed to steal the banking details that users enter when they access the website belonging to certain banking entities.

Once a computer is infected, it sends a message to the email account of its creator.

Banker.MAI reaches the computer in an email message in Portuguese which seems to have been sent by a certain banking entity requiring users to confirm certain data.

Visible Symptoms 

    

Banker.MAI is easy to recognize, as it reaches the computer attached to an email message in Portuguese which seems to have been sent by a certain banking entity and requires users to confirm certain data.

The message has the following characteristics:

  • Subject: it can be the following, among others:
    Comprovante Deposito-29092009
  • Message:

    Segue em anexo o comprovante de depósito em conta corrente do ressarcimento do Contrato n° 118255371, Pedimos que confira seus dados e extrato e verifique se todas as informações e valores estão corretos para confirmar nosso procedimento de em nosso sistema

    Atenciosamente,

    Departamento Financeiro

    Finasa S/A

    www.finasa.com.br

    Av. Brigadeiro Faria Lima, 1266 - São Paulo - SP
    (11) 3345-2334 / 2235-2354
  • Atachment: the message contains a self extracting RAR which contains the Trojan.