Trojan-Spy.DOS.Smitfraud.a

Technical Details

This Trojan program utilizes spoofing technology. The Trojan is represented by a fake HTML page. It is used for stealing confidential information about clients of Smith Barney financial company (www.smithbarney.com).

It is sent by email as an important message from Smith Barney company with the following subject:

Smith Barney: Security Maintenance

This message contains an image with the hyperlink. The user can see the correct link, but when the user clicks on the link, a different page is loaded into the browser. It is possible by using 'image map' HTML-technology.

The loaded page is an exact copy of the financial company site. The user is prompted for his account information.

Once a user visits the fake site and enters account details or personal information, these details are sent to a malicious remote user, who will then have access to user's account.