The internet’s leading banking trojan
A trojan horse is a malware included in or disguised as a regular application to perform malicious activity such as stealing valuable data and user credentials, stealthy monitoring or controlling a computer, or encrypting a victim’s data and later claim for a ransom (known as ‘ransomware’).
Banking trojans are a type of trojan malware that steals credentials used in financial institutions which are sent to a remote server in near real time. They can also modify the user’s browser session to ask for personal information such as payment card number and PIN, one-time passwords, or even perform and approve unauthorized transactions on the user’s behalf.
Some banking trojans have the ability to be kept in an almost undetectable dormant state, until a specific event triggers the malware for action, for example, when a specific banking website is accessed.
Emotet, Zeus and Gozi are examples of prevalent banking trojan malware that primarily spread through spam emails. Frequently, the infection occurs when the victim unknowingly executes a malicious script, macro-enabled document files, or downloads malware via a malicious link. The spam message is usually very appealing and may contain familiar branding and language.
What you can do to prevent banking trojans
- Install reputable antivirus software and keep it updated. Run a full scan periodically and whenever you receive a suspicious file or notice something unusual with your computer (for example, if the computer seems to slow down in certain circumstances).
- Regularly install the recommended operating system updates and patches.
- Do not follow links nor download files attached in unexpected messages. In case of doubt, check with the sender why he/she sent you the suspicious link or files, preferably using another means of communication (a text message, an instant message app, a phone call, etc.).
- To access electronic banking websites, type the address (URL) in your browser instead of following links. Use official app stores to install mobile apps, avoid downloading from unknown sources as they may contain malware.
- Avoid using public computers or public WiFi to access your financial accounts. Access from trusted computers you know has the security features installed and updated.
- If possible, use a dedicated computer for financial transactions. Avoid sharing the computer with other persons or your family who may inadvertently install software you don’t know about.
- Avoid saving passwords in your smartphone or web browser.
