20-Year-Old Brazilian Cybercrook Cashes in with Over 100 Banking Trojans

An extremely clever and proficient malware creator in Brazil was located by security researchers uncovering his tracks where he created over 100 banking Trojans from 2013 that are valued at over $300 each.

Researchers have made this interesting discovery and revealed some stunning details about an individual who may have made off with over tens of thousands of dollars from his many banking Trojan creations.

A person who is identified as a Computer Science student from the Tocantins school and goes by the alias of "Lordfenix" or "Filho de Hakcer" (aka hacker's son), has been roaming various hacker forms making claim of his malware. The malware creations he has conjured up are ones identified as banking Trojans that are responsible for compromising accounts allowing access to pilfer funds and information. One of the creations, classified as TSPY_BANKER.NJH, is able to recognize the URL for a targeted bank when typed into a web browser address bar. The application will then spoof a banking site and then display an error message to the user where login credentials may be stolen, and access gained.

In Brazil, where the lone perpetrator setup his money-making factory of dishing out banking Trojans, banks recommend that users employ a security plugin called G-Buster. In doing so, G-Buster is claimed to protect users from banking information theft. However, through the use of G-Buster the Brazilian hacker was able to use his specially crafted malware to terminate the protection software's process and leave banking sessions exposed.

While tracking the activities of the former Computer Science student, researchers stumbled upon fully functional variations of the Trojans that were free of charge but with restrictions for targeted banks. If whoever wanted to change the list of banks they would need to purchase the Trojan from him, granting him a nice payday without performing the dirty deeds of hacking into online banking accounts. Sounds almost like a shareware application that allows users to try it before they buy.

While the 20-year-old Brazilian man continues his dirty objectives of spreading his banking Trojan malware, time runs short for his stay as we hope that law enforcement agencies will get a wind of what is going down.

While the malware has certain innate flaws, such as an instability running on Internet Explorer and Firefox, the banking Trojan may be targeting users of Google Chrome browsers. In any given case, computer users should utilize proactive means to protect their system by keeping all software updated and running a trusted antimalware application.