Home Malware Programs Trojans Java/Spy.Banker.AB

Java/Spy.Banker.AB

Posted: March 25, 2013

Threat Metric

Threat Level: 9/10
Infected PCs: 26
First Seen: March 25, 2013
Last Seen: September 4, 2022
OS(es) Affected: Windows

Java/Spy.Banker is a banking Trojan that modifies payment documents in a popular remote banking system BIFIT's iBank 2. Java/Spy.Banker.AB is closely related to Carberp Trojan banking fraud. Java/Spy.Banker.AB spreads as an additional module 'AgentX.jar', which is downloaded by Carberp. After modifications to iBank2, with the help of Java/Spy.Banker.AB, the attackers can control all payments made with this banking program. BIFIT's iBank2 does not check the integrity of its own code, and after modification, the remote banking program is still operating correctly and can send money. Java/Spy.Banker.AB is able to bypass one-time password (OTP) security checks.

Loading...