Banker.IMA is a Trojan, which although seemingly inoffensive, can actually carry out attacks and intrusions. It captures certain information entered or saved by the user, with the corresponding threat to privacy:
email addresses. It sends the gathered information to a remote user by any available means: email, FTP, etc. - In the local network:
it generates a large amount of network activity and consumes bandwidth.
It uses stealth techniques to avoid being detected by the user: - It injects itself in running processes.
Banker.IMA does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc. |