THE TROJAN MONEY SPINNER

Short Description
In this paper when we refer to a ‘banking trojan’ we are talking …. Haxdoor is a good example of a banking trojan that uses API …

Website: www.f-secure.com | Filesize: 430kb

Content
THE TROJAN MONEY SPINNER ST?LBERG
VIRUS BULLETIN CONFERENCE SEPTEMBER 2007 1
THE TROJAN MONEY SPINNER
Mika St?lberg
F-Secure Corporation, Tammasaarenkatu 7, PL24,
00181 Helsinki, Finland
Tel +358 9 2520 0700
Email mika.stahlberg@f-secure.com
ABSTRACT
It is obvious that as more and more money moves online,
criminals who want to steal that money are moving online as
well. Since banks no longer have large sums of money in their
vaults and bank robbery has several inherent risks, criminals
have found a lucrative and a much lower-risk business in
online crime. Email-based phishing has been the first echelon
of this change, but the situation is already changing again.
Online banks have begun to improve their security and
authentication methods. This will very much reduce the
effectiveness of phishing that is based on emails and
fraudulent sites. There is a clear demand for better solutions in
the world of crime. The second echelon of online bank fraud is
banking trojans. These trojans infect the computer of an online
bank customer. The trojan has visibility to everything the
customer does and can use his authenticated banking session
to steal his money. Also, a key difference from email-…