Slashdot Mirror

← Back to Stories (view on slashdot.org)

Shifu Banking Trojan Has an Antivirus Feature To Keep Other Malware At Bay

Posted by Soulskill on from the probably-more-effective-than-actual-AV-solutions dept.

An anonymous reader writes: Shifu is a banking trojan that's currently attacking 14 Japanese banks. Once it has infected a victim's machine, it will install a special module that keeps other banking-related trojans at bay. If this module sees suspicious, malware-looking content (unsigned executables) from unsecure HTTP connections, it tries to stop them. If it fails, it renames them to "infected.exx" and sends them to its C&C server. If the file is designed to autorun, Shifu will spoof an operating system "Out of memory" message.

4 of 60 comments (clear)

  1. A Good Antivirus by Anonymous Coward · · Score: 5, Funny

    I have been looking for a good antivirus for a while now. Is this free and where can I download it? //Signed//
    A Concerned User

  2. Very apt name for Portuguese speakers by Flavianoep · · Score: 1, Funny

    Shifu sounds a lot like the Portuguese curse: "se fu...", which translates like "you're f--- up"!

    --
    Linux is for people who don't mind RTFM.
  3. Re:Trojan Price-war by Anonymous Coward · · Score: 2, Funny

    Yeah, but which one keeps McAfee out?

  4. Re:And so it begins by Anonymous Coward · · Score: 2, Funny

    You should have stayed behind seven proxies, bro.