This Trojan arrives on a system as a file dropped by other malware or as a downloaded file from a malicious Web site.
Upon execution, this Trojan drops a copy of itself. This Trojan monitors the Internet Explorer activities of an affected system. When a user accesses any of the targeted Web sites, it opens a spoofed login Web page, where it is able to collect sensitive information.
This Trojan steals user names and passwords related to the affected user's online banking transactions.
The said Trojan uploads its stolen information to a certain IP address.


More...