GLENDALE, Calif., Oct. 17 /PRNewswire/ -- Over the last few days, several variants of the Haxdoor family of Trojans have emerged. These Trojans use rootkit functions and steal confidential user details in order to commit online fraud and identity theft.
"It seems that the author or authors of these malicious codes are mass-mailing Trojans as attachments to spam messages. For this reason, it is recommended you delete any suspicious or unwanted email messages," said Luis Corrons, Director of PandaLabs. "These Trojans are very dangerous, due to their capacity to use a rootkit to hide their actions. It is highly advisable to complement traditional antivirus solutions with proactive technologies that can detect suspicious processes based on behavioral analysis," Corrons added.
The new variants of Haxdoor detected by PandaLabs have several common characteristics. These characteristics include their capacity to install a rootkit, which is a program designed to hide objects, such as processes, files, or entries. This rootkit would also use the same program to hide themselves from both the user and the majority of traditional security solutions.
Similarly, all of the new variants detected are designed to steal passwords for popular Internet services such as eBay, Pay Pal or Web Money, and for many email clients, including Outlook Express. A malicious user could use these details to carry out online fraud and identity theft.
These Trojans make the necessary modifications so the firewall installed on the computer authorizes their malicious activities and thus ensures there are no obstacles to prevent them from sending out the stolen data.
TruPrevent(TM) proactive detection technologies detect and block these new Trojans, so computers with these technologies have been protected from the moment they have appeared.
About Panda Software, USA
Panda Software
