Hackers behind the new version of the Zeus/Zbot banking Trojan expressed their gratefulness to the creators of the antivirus software, Kaspersky Lab and Avira in particular. The Trojan comes with a hidden message that thanks and taunts the security vendors for ‘helping’ them improve their malware.
The news was reported at Trend Micro blog which wrote about the new binary file identified as TROJ_ZBOT.BTM. The malware steals online banking information, including user names and passwords, and has earned a reputation as one of the deadliest banking Trojans.
Interestingly, the latest incarnation of the Trojan has an attached message that reads: "Thanks to KAV and to Avira for new quests, i like it! NOD32 and SAV is stupid!"
Trend Micro says the message is uncovered when the binary file unpacks and copies itself into the victim system's memory. "This taunting message shows that cybercriminals have systems that monitor the performance of AV companies in detecting their craft, and they are constantly updating their software to avoid detection," Trend says.
(eCommerce)