Mailinglist Archive

Scoop on the latest trojans and worms
Posted on 24.11.2006

Banker.FJI is a Trojan that displays false login screens when users
visit the web pages of certain Brazilian banks, such as Banco do Brasil,
Bradesco or Itau. When users enter their login details in the spoof
pages, or in the legitimate pages monitored by the Trojan, this data is
entered in a text file which is then sent to the creator of the Trojan.
It also monitors the Internet traffic generated when visiting websites
related with Banco do Brasil.

http://www.net-security.org/virus_news.php?id=715