16 March 2007 | 42,164 views

MSN Password Stealing Trojan Becomes Public

Prevent Network Security Leaks with Acunetix

Ah another trojan, this time targeting MSN Live logins for. The trojan has been made public by some kind citizen calling himself “Our Godfather” on the BitTorrent network.

The sad thing is…I guess it works and hundreds of people will have installed it.

Malware designed to steal users’ Windows Live Messenger password has been released onto the net. The password stealer was released for download via BitTorrent earlier this week by a hacker using the handle “Our Godfather”.

The malware comes in the form of an IMB download confirmed by anti-virus firm Sophos as containing a password-stealing Trojan horse. Victims would need to be tricked into downloading and executing the malware, which might be renamed in a bid to disguise its identity, in order for the exploit to work.

It works a bit like the common phishing schemes, but it uses actual software to emulate the MSN Messenger login screen rather than a web-page.

“It displays a fake Windows Live Messenger Login Screen and prompts for login details. Username and password are captured and stored in C:\pas.txt,” explained Sophos senior technology consultant Graham Cluley.

Sophos has named the malware as MSNfake-M and added protection against the code to its security software packages. Other anti-virus firms can be expected to follow suit.

Another reason to use Sophos I guess, they are always ahead of the curve on this stuff.

Source: The Register



Recent in Malware:
- Windows Registry Infecting Malware Has NO Files
- FakeNet – Windows Network Simulation Tool For Malware Analysis
- Microsoft’s Anti-Malware Action Cripples Dynamic DNS Service No-IP

Related Posts:
- New Password Stealing Trojan Targets WoW Players
- Malicious Cryptography – Cryptology & Cryptovirology
- New Trojan Targets World Cup Fans – Troj/Haxdoor-IN

Most Read in Malware:
- Nasty Trojan Zeus Evades Antivirus Software - 77,295 views
- Hospital Hacker GhostExodus Owns Himself – Arrested - 47,445 views
- US considers banning DRM rootkits – Sony BMG - 44,926 views

Advertise on Darknet

6 Responses to “MSN Password Stealing Trojan Becomes Public”

  1. asdas 19 March 2007 at 2:03 pm Permalink

    Hello friends, I have released Msn Live Password Stealer V6, it has been modified so it will not be detected as a virus, so big mean companies like sophos will not detect it as a virus,

    This program is only said to be a virus because it can be used to retrieve a victims password, this program was intentionally made to be used for concerned parents who would like to monitor there kids for morally undesirable internet use so that the parents can, for example save conversation information so they can filter for words such as “drugs”, “alcohol” etc….

    The torrent keeps getting deleted when put on the torrent sites like torrentspy, and the popularity of this program has diminished due to this, this program can be downloaded through torrents sites like isohunt.

  2. Sypherknife 5 June 2007 at 12:31 pm Permalink

    Why would you want to steal thousands of email accounts?
    Sure its fun to do it to a friend or.. someone you don’t like much.
    But why crate a trojan to steal passwords off people you don’t know :/

  3. Torvaun 5 June 2007 at 3:06 pm Permalink

    Because of what goes through email accounts. Names and passwords to any forum or site you sign up for. Shipping information for anything you buy online. Just watching an email account can give you all the information you need to start stealing identities, which is always big business.

  4. Sandeep Nain 4 September 2007 at 11:46 pm Permalink

    @asdas: I don’t think there is a point in stealing passwords for such small thing… Parents can always install s/w like keylogger and get better results.they can not only check the chat logs through that but also may know what kind of websites kids are visiting..
    I will term your software as trojan too…

  5. Alfred Farrington 1 December 2008 at 8:58 pm Permalink

    Ah here we go again the issue of is this a tool or is it something just bad. I think it depends on the way you look at it to young kids its a way to spy on friends. To parents its a way to spy on children. To enterprises its a trojan. To anti-virus companies its bad news and you need to get rid of it. To the law its considered a way to steal identities. I think that people should stop just pressing yes to download something take the time to read before downloading something. I think alot of these things wouldn’t affect us if we took the time to pay attention.

  6. suniversi 6 February 2009 at 6:46 pm Permalink

    saakls aa m