Windows 7: New Banking Trojan Targets All Major Browsers

A Guy · 27 Feb 2011

Quote:

Recently our e-crime unit has detected a new banking trojan, named as Tatanga, with Man in the Browser (MitB) functions affecting banks in Spain, United Kingdom, Germany and Portugal. Like SpyEye, it can perform automatic transactions, retrieving the mules from a server and spoofing the real balance and banking operations of the users. Its detection rate is very low, and the few antivirus engines that can detect it yield a generic result.

The trojan in question is rather sophisticated. It is written in C++ and uses rootkit techniques to conceal its presence, though on occasion, its files are visible. The trojan downloads a number of encrypted modules (DLLs), which are decrypted in memory when injected to the browser or other processes to avoid detection by antivirus software.

Quote:

Tatanga hooks into explorer.exe and can inject HTML in Internet Explorer, Mozilla Firefox, Google Chrome, Opera, Minefield (Firefox dev builds), Maxthoon, Netscape, Safari and Konqueror, basically every popular browser.

Other noteworthy features include support for 64-bit Windows, anti-VM technology, mobile OTP phishing and Trusteer Rapport evasion.

Source

A Guy

Night Hawk · 28 Feb 2011

And people are duped into believing any one browser is more secure then another? Malware writers are getting a bit more sophsticated in their efforts.

I be he · 06 Mar 2011

Do not do any banking over the internet!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Night Hawk · 07 Mar 2011

Besides banking people tend to order more onllne these days as ecommerce has grown tremendously over the last several years. This one is however primarily targeting the European banking system.

Rockfella · 07 Mar 2011

Well the situation is not that serious as you think. One needs to use logic as well while banking online.

Quote: Originally Posted by I be he

Do not do any banking over the internet!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

I be he · 08 Mar 2011

Quote: Originally Posted by Rockfella

Well the situation is not that serious as you think. One needs to use logic as well while banking online.

Quote: Originally Posted by I be he

Do not do any banking over the internet!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

I understand what your saying, but i still disagree with your " situation is not that serious" statement.

Night Hawk · 09 Mar 2011

I think what Rockfella was pointing out was that particular malware is not a serious matter for everyone but for those who could be compromised since they bank in the countries named in the report.

For banking online as a general rule however a degree of common sense would be the first thing to apply as far as taking the necessary security precautions whenever possible. Banks as a rule consult with security professionals while the average user can still be caught offguard and become a victim!

So you could say that taking security seriously when doing any online banking is the golden rule of thought.

Windows 7: New Banking Trojan Targets All Major Browsers

New Banking Trojan Targets All Major Browsers problems?