Detection of development assistance program ... trojan

Research experts of Sunbelt Software Inc. They said they had just discovered a special program that they believed was used to create new keyloggers and trojans to target customers of credit institutions around the world.

Security experts happened to discover the program on a website that was used to gather information about variations of a type of trojan called WinLdra.

It can be said that the above program provides a very easy to use interface in creating a completely new WinLdra trojan variant that can steal credit card numbers or online bank accounts on computers they infecting. Not only is this kind of trojan capable of automatically making electronic payments to transfer money to malicious attacker's account. This trojan development program is extremely easy to use even for hackers who don't have much experience in creating special trojans.

Eric Sites, Sunbelt's vice president for research and development, said this could be the cause of the "flash flood" of WinLdra variations on the Internet over the past few months with huge volumes. information about customers of stolen banks and financial credit institutions.

Until recently, the new WinLdra trojan creation program was officially announced for sale online at www.ratsystems.org. This site is no longer active. Domain ownership is a person named "Semenov Dimitry" living in Russia.

WinLdra is primarily distributed through dangerous websites by exploiting security holes in Microsoft's Internet Explorer browser. Once infected on a user's computer, the trojan is able to send all Windows Protected Storage content information to malicious attackers.

Sunbelt researchers discovered WinLdra Trojan for the first time in August 2005, following the trail of this trojan that discovered a line of stolen bank customers' information. financial credit institutions. But that trojan continues to grow and spread. It can be said that the discovery of this trojan development program is a reward for Sunbelt experts.

So it can be said that WinLdra is an extremely difficult type of trojan to detect because their new versions are created extremely quickly and simply with a little skill. A support program is too simple, too easy to use and too easy to install.

In addition, the discovery of this trojan development program also shows that the theft of user account information from banks, financial institutions or credit card numbers is becoming more and more Sophisticated complexity with more tricks. This further confirms the trend because of the financial incentives of hackers today.