MSN Password Stealing Trojan Becomes Public

Keep on Guard!


Ah another trojan, this time targeting MSN Live logins for. The trojan has been made public by some kind citizen calling himself “Our Godfather” on the BitTorrent network.

The sad thing is…I guess it works and hundreds of people will have installed it.

Malware designed to steal users’ Windows Live Messenger password has been released onto the net. The password stealer was released for download via BitTorrent earlier this week by a hacker using the handle “Our Godfather”.

The malware comes in the form of an IMB download confirmed by anti-virus firm Sophos as containing a password-stealing Trojan horse. Victims would need to be tricked into downloading and executing the malware, which might be renamed in a bid to disguise its identity, in order for the exploit to work.

It works a bit like the common phishing schemes, but it uses actual software to emulate the MSN Messenger login screen rather than a web-page.

“It displays a fake Windows Live Messenger Login Screen and prompts for login details. Username and password are captured and stored in C:\pas.txt,” explained Sophos senior technology consultant Graham Cluley.

Sophos has named the malware as MSNfake-M and added protection against the code to its security software packages. Other anti-virus firms can be expected to follow suit.

Another reason to use Sophos I guess, they are always ahead of the curve on this stuff.

Source: The Register

Posted in: Malware, Windows Hacking

, , , , ,


Latest Posts:


OWASP ZSC - Obfuscated Code Generator Tool OWASP ZSC – Obfuscated Code Generator Tool
OWASP ZSC is an open source obfuscated code generator tool in Python which lets you generate customized shellcodes and convert scripts to an obfuscated script.
A Look Back At 2017 – Tools & News Highlights A Look Back At 2017 – Tools & News Highlights
So here we are in 2018, taking a look back at 2017, quite a year it was. Here is a quick rundown of some of the best hacking/security tools released in 2017, the biggest news stories and the 10 most viewed posts on Darknet as a bonus.
Spectre & Meltdown Checker - Vulnerability Mitigation Tool For Linux Spectre & Meltdown Checker – Vulnerability Mitigation Tool For Linux
Spectre & Meltdown Checker is a simple shell script to tell if your Linux installation is vulnerable against the 3 "speculative execution" CVEs that were made public early 2018.
Hijacker - Reaver For Android Wifi Hacker App Hijacker – Reaver For Android Wifi Hacker App
Hijacker is a native GUI which provides Reaver for Android along with Aircrack-ng, Airodump-ng and MDK3 making it a powerful Wifi hacker app.
Sublist3r - Fast Python Subdomain Enumeration Tool Sublist3r – Fast Python Subdomain Enumeration Tool
Sublist3r is a Python-based tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting.
coWPAtty Download - Audit Pre-shared WPA Keys coWPAtty Download – Audit Pre-shared WPA Keys
coWPAtty is a C-based tool for running a brute-force dictionary attack against WPA-PSK and audit pre-shared WPA keys.


6 Responses to MSN Password Stealing Trojan Becomes Public

  1. asdas March 19, 2007 at 2:03 pm #

    Hello friends, I have released Msn Live Password Stealer V6, it has been modified so it will not be detected as a virus, so big mean companies like sophos will not detect it as a virus,

    This program is only said to be a virus because it can be used to retrieve a victims password, this program was intentionally made to be used for concerned parents who would like to monitor there kids for morally undesirable internet use so that the parents can, for example save conversation information so they can filter for words such as “drugs”, “alcohol” etc….

    The torrent keeps getting deleted when put on the torrent sites like torrentspy, and the popularity of this program has diminished due to this, this program can be downloaded through torrents sites like isohunt.

  2. Sypherknife June 5, 2007 at 12:31 pm #

    Why would you want to steal thousands of email accounts?
    Sure its fun to do it to a friend or.. someone you don’t like much.
    But why crate a trojan to steal passwords off people you don’t know :/

  3. Torvaun June 5, 2007 at 3:06 pm #

    Because of what goes through email accounts. Names and passwords to any forum or site you sign up for. Shipping information for anything you buy online. Just watching an email account can give you all the information you need to start stealing identities, which is always big business.

  4. Sandeep Nain September 4, 2007 at 11:46 pm #

    @asdas: I don’t think there is a point in stealing passwords for such small thing… Parents can always install s/w like keylogger and get better results.they can not only check the chat logs through that but also may know what kind of websites kids are visiting..
    I will term your software as trojan too…

  5. Alfred Farrington December 1, 2008 at 8:58 pm #

    Ah here we go again the issue of is this a tool or is it something just bad. I think it depends on the way you look at it to young kids its a way to spy on friends. To parents its a way to spy on children. To enterprises its a trojan. To anti-virus companies its bad news and you need to get rid of it. To the law its considered a way to steal identities. I think that people should stop just pressing yes to download something take the time to read before downloading something. I think alot of these things wouldn’t affect us if we took the time to pay attention.

  6. suniversi February 6, 2009 at 6:46 pm #

    saakls aa m