Home Malware Programs Adware Brolux

Brolux

Posted: October 19, 2015

Threat Metric

Threat Level: 8/10
Infected PCs: 295
First Seen: October 19, 2015
Last Seen: November 24, 2021
OS(es) Affected: Windows

Brolux (identified as Win32/Brolux.A by anti-virus vendors) is a Trojan horse infection that appears to target Japanese citizens predominantly. The purpose of the Trojan is to exploit known vulnerabilities in the user's computer and use them to drop its harmful payload to the targeted computer. Once Brolux has been deployed and executed, it may work in the background to gather information about the user's online activities silently, and more specifically the activities that are associated with financial data. Brolux has information about 88 Japanese Internet banking websites, and if the victims of the attack visit one of these websites, they may be redirected to a pre-made phishing web page that resembles the design and interface of the legitimate organization's website. The cyber crooks may harvest all of the information entered in the phishing page. This may include passwords, login credentials, bank balance, credit card information, and other data that may be used to cause financial harm if it is in the wrong hands.

Brolux's distribution happens with the help of some well-known exploits that target old vulnerabilities in Flash Player and Internet Explorer. Users who use outdated versions of these programs may be vulnerable to an infection with Brolux, so we can't stress how important it is it to keep your software updated to the latest version. Trojan droppers that may be used to spread Brolux may take advantage of mass email spam campaigns as their primary method of distribution, so users who use Japanese online banking websites should be extra cautious about the emails they read.

Loading...