Banking Trojan disables MS Anti-Spyware
Found on The Register on Tuesday, 08 February 2005
The first piece of malware to attack Microsoft's new prototype anti-spyware product has emerged. The BankAsh-A Trojan disables Microsoft AntiSpyware Beta in an attempt to suppress any warning messages the package might display. It also deletes files within the program's folder. Unlike other items of malware, BankAsh-A makes no attempt to turn off anti-virus apps.
The main function of BankAsh-A is to steal online banking passwords from unsuspecting Windows users. The Trojan targets users of UK online banks such as Barclays, Cahoot, Halifax, HSBC, Lloyds TSB, Nationwide, NatWest, and Smile. The malware records passwords and keystrokes once users of infected machines visit targeted websites.
First SP2 problems, now AntiSpyware. Earlier, MS released 13 patches, 9 of them for critical bugs. Honestly, I'd expect this from a beta version.