Virus Encyclopedia
Welcome to the Virus Encyclopedia of Panda Security.
Banbra.BZY | |
Threat Level DamageDistribution |
 |
| Common name: | Banbra.BZY |
| Technical name: | Trj/Banbra.BZY |
| Threat level: | Low |
| Alias: | Trojan-Spy.Win32.Banker.ark |
| Type: | Trojan |
| Effects: | It obtains data from several online services, as when users access any of them, it displays a false website that imitates the legitimate one instead. |
| Affected platforms:
|
Windows 2003/XP/2000/NT/ME/98/95 |
| First detected on: | April 3, 2006 |
| Detection updated on: | April 5, 2006 |
| Statistics | No |
Proactive protection: | Yes, using TruPrevent Technologies
|
Brief Description | |
Banbra.BZY is a password stealer type Trojan that searches for Internet Explorer windows. Then, it checks if the user accesses URLs containing certain text strings, which belong to online banking entities. If so, it displays a false website that imitates the original one, where users are requested to log in. This way, Banbra.BZY obtains confidential user data, such as username and password. Then, it sends the data it has gathered to a certain email address. Banbra.BZY does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. |
Visible Symptoms | |
Banbra.BZY is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer. |