Security researchers have discovered a new keylogger Trojan that can record not only keyboard actions but also mouse movements.
The Trojan PWSteal-Bancos-Q is programmed specifically to target customers of online banking institutions, primarily in Brazil. However, PC Tools, an Australian security firm, warns that other variants of this virus may be developed to attack online financial websites globally.
In addition to its ability to capture keystrokes, the Trojan PWSteal-Bancos-Q can also track users’ mouse clicks and then send this information back to the author via FTP. This technique is designed to bypass the virtual keyboard protections employed by online banks against keylogger attacks.
The actual effectiveness of this mouse-tracking technique is still unclear. However, the emergence of this new technique indicates that authors of malware are continuously developing new methods to circumvent security solutions.
HVD