Trojans, containing malicious codes, are nothing new and have been around for many years with detections back to 2003 but they flourish in high spending seasons.
"As with any holiday, we see consumers spending and travelling more across the region and abroad. Whether they are booking a flight or buying a gift, users can now choose to do this from their home computer, smartphone or tablet, but all are essentially broadcasting sensitive financial information that could easily be put into the wrong hands. Cybercriminals are first and foremost financially motivated, therefore we should be looking at how we protect ourselves when sharing these details online, to prevent attacks through Trojans or otherwise," says Kara Rawden, senior marketing manager, consumer - Middle East and Africa Symantec Corporation.
For a Trojan to spread, it must be invited onto your computer, which could easily occur by opening an email attachment or downloading and running a file from the Internet. Once the Trojan is in, it could trigger loss, or even theft of data.
Traditionally, Trojans typically captured data traffic exchanged between the user and the online banking website. The captured information included the authentication information, which is collected and sent to the attacker by the Trojan for their use or to on sell to other parties for a profit.
More sophisticated banking Trojans employ a man-in-the-browser (MITB) method that is designed to overcome defences, such as SSL encryption and multi-factor authentication. MITB is achieved by monitoring and intercepting user activities in the browser in real time and modifying the HTML content inside the context of the browser, either to display false information to the user or to manipulate details of transactions sent from the user to the bank.
In addition to being able to steal information, they also offer a back door, allowing a remote attacker to control the infected computer. Commands range from listing and terminating processes running on the computer, clearing browser cookies, executing arbitrary programs, to completely rebooting the computer.
