This Trojan arrives on a system as a file dropped by other malware or installed manually by a user.

It monitors the Internet Explorer activities of the affected system, specifically the address bar and title bar. It logs keystrokes when a user accesses banking-related Web sites which this Trojan monitors in Internet browser address bars.

It steals sensitive information, such as user name and password and saves it in a file. This routine risks the exposure of sensitive information, which may then lead to the unauthorized use of the stolen data.

Gathered data is then sent to a public email address that uses a certain domain server using its own SMTP engine.



More...