Banking Trojans: From Stone Age to Space Era

Abstract

The “Holy Grail” for most cybercriminals is to steal the money of unsuspecting users. Unfortunately, there are many ways for cybercriminals to access confidential financial information, including bank account credentials. These methods include phishing campaigns with a fake bank web page, and info-stealing malware with simple keylogging capabilities for documenting victims’ usernames and passwords.

Banking Trojans differ from standard Trojans, as they are written for the express purpose of stealing confidential information from victims’ bank accounts and online payment services. They are sophisticated and equipped with Man-in-the-Browser (MiB) techniques such as web injections or redirection mechanisms.