New Trojan variant steals confidential usernames and passwords

A Trojan variant named Win32.LdPinch.kj can steal system usernames and passwords, get confidential data from applications and open a Backdoor in the compromised computer, say security experts at MicroWorld Technologies.

The multi-pronged malware comes as a hidden component of many free utilities and other greywares downloaded from the Internet. Once it infects a computer, the Trojan adds the URLs of many malicious Russian websites into the favorites folder, even as it makes changes in the registry to automatically activate the Trojan every time Windows is started.

Win32.LdPinch then steals authentication data of computers and application software and emails them to the malware author. The attacker can use it for hacking into the victims computer or performing operations in the compromised accounts.

It also comes with a Backdoor component which enables the blackhat to take over the computer. Sulabh Mahant, a Security Analyst with MicroWorld Technologies explains, The Backdoor connects to the intruder via IRC channels. Now the hacker can run a remote command shell, upload and download files, create a network proxy, logon to malicious websites and download files from the Internet. Before you know, your computer is at the mercy of a man who has no face!

An information stealing Trojan can become nightmarish for organizations if it manages to sneak into systems storing highly confidential and strategic files. As a result, the use of such Trojans in corporate espionage has risen dramatically over the last few years. For a home user, it can cost dear by way of theft of credit card and bank accounts, e-wallets and online game accounts.

Sunil Kripalani, Vice President, Global Sales and Marketing, MicroWorld Technologies, points out, If you ask me which is the fastest evolving, adapting and advancing breed of malware, the answer is Trojans. In fact there are many sub-classes like Trojan Clickers, PSW Trojans, Trojan Droppers and more that fall under the ever widening Trojan umbrella. At a time when malware writers are getting increasingly inclined towards laying their hands on your wallet, it is vital to flush out even the last strain of these nasties from computers.

MicroWorld Technologies provides proactive and highly advanced protection for organizations and individuals against all types of Viruses, Trojans and other malicious programs. While eScan range of products safeguard Servers and Work Stations, MailScan defends Mail Servers from malware, Spam and Phishing.


About MicroWorld

MicroWorld Technologies develop an advanced AntiVirus, Content Security and Firewall software eScan, MailScan, and eConceal. MicroWorld Winsock Layer (MWL) is the revolutionary technology that powers most of MicroWorld products enabling them to achieve several certifications and awards by some of the most prestigious testing bodies, notable among them being Virus Bulletin, Checkmark, TUCOWS, Red Hat Ready and Novell Ready.

Add a Comment

No messages on this article yet

Editorial: +44 (0)1892 536363
Publisher: +44 (0)208 440 0372
Subscribe FREE to the weekly E-newsletter