<?xml version="1.0" encoding="UTF-8" standalone="yes"?><oembed><version><![CDATA[1.0]]></version><provider_name><![CDATA[Bill Mullins&#039; Weblog - Tech Thoughts]]></provider_name><provider_url><![CDATA[https://billmullins.wordpress.com]]></provider_url><author_name><![CDATA[Bill Mullins]]></author_name><author_url><![CDATA[https://billmullins.wordpress.com/author/billmullins/]]></author_url><title><![CDATA[Panda Security&rsquo;s July 24, 2009 Report on Viruses and&nbsp;Intruders]]></title><type><![CDATA[link]]></type><html><![CDATA[<h4>Courtesy of Panda Security. Panda Security’s weekly report on viruses and intruders.</h4>
<p>The Banbra.GIZ banker Trojan, the Zapchast.ET backdoor, and the HomeAntivirus2010 fake antivirus, are the subject of this week’s PandaLabs report.</p>
<p>Banbra.GIZ targets a Brazilian bank. When run, the malicious file opens a spoof bank application form informing users that the bank’s IT systems are being updated, and they must therefore enter their details again in the screen displayed.</p>
<p>Any details entered are sent to cyber-crooks, providing them access to users’ bank accounts.</p>
<p>Zapchast.ET is a backdoor Trojan designed to connect to IRC channels and await instructions that allow attackers to remotely access and control the compromised computer.</p>
<p>Like other malicious codes that have appeared over the last few weeks, this malware uses the story of Michael Jackson’s death to trick and infect users. In this case, the malware is distributed through emails with subjects related to the singer.</p>
<p>Additionally, when run, it displays a photo of Michael Jackson.</p>
<p><a href="https://billmullins.files.wordpress.com/2009/07/image41.png"><img style="border-bottom:0;border-left:0;display:inline;border-top:0;border-right:0;" title="image" src="https://billmullins.files.wordpress.com/2009/07/image_thumb41.png?w=348&#038;h=348" border="0" alt="image" width="348" height="348" /></a></p>
<p>HomeAntivirus2010 is a fake antivirus. As with all of its kind, it simulates an antivirus scan of the system. It then (falsely) claims to have detected dozens of examples of malware on the computer.</p>
<p>It also modifies the Windows Security Center so that it indicates that the antivirus protection is disabled.</p>
<p>The objective is to make users believe their computer is infected and their security is at risk to offer them a solution: purchasing a pay version of the fake antivirus.</p>
<p><a href="https://billmullins.files.wordpress.com/2009/07/image42.png"><img style="border-bottom:0;border-left:0;display:inline;border-top:0;border-right:0;" title="image" src="https://billmullins.files.wordpress.com/2009/07/image_thumb42.png?w=474&#038;h=331" border="0" alt="image" width="474" height="331" /></a></p>
<p><a href="http://www.flickr.com/photos/panda_security/tags/homeantivirus2010/"></a></p>
<p>More information about these and other malicious codes is available in the <a href="http://www.pandasecurity.com/homeusers/security-info/about-malware/encyclopedia/" target="_blank">Panda Security Encyclopedia</a>.</p>
<p>You can follow Panda Security’s activity online on <a href="http://twitter.com/panda_security">Twitter</a>, and the <a href="http://pandalabs.pandasecurity.com/">PandaLabs blog</a>.</p>
<p>If you enjoyed this article, why not subscribe to this blog via RSS, or email? It’s easy; just click on <a href="http://feeds.feedburner.com/wordpress/TVcE">this link</a> and you’ll never miss another Tech Thoughts article.</p>
]]></html><thumbnail_url><![CDATA[https://billmullins.files.wordpress.com/2009/07/image_thumb41.png?fit=440%2C330]]></thumbnail_url><thumbnail_width><![CDATA[]]></thumbnail_width><thumbnail_height><![CDATA[]]></thumbnail_height></oembed>