[Ramrod]

Korgo worm targets bank accounts

Extreme phishing


By Nick Farrell: Thursday 03 June 2004, 10:18

A NEW WINDOWS worm that steals online banking information, and secretly transmits it back to its creators has been spotted in the wild.
The Korgo worm uses holes in the patchwork quilt which is Windows, despite the fact that the hole was patched by Vole in April. According to a spokesman for F-Secure the worm keeps spreading and it's aggressively stealing user information from infected machines. It does this via a keylogger, which specifically collects user logins for online banks.

It also logs everything the user types to any web form - this will collect lots of credit card numbers and passwords. The spokesman warned that anyone who had been infected by Korgo, to change their passwords and cancel their credit cards.

Although the hole that Korgo exploits was fixed in Microsoft's megapatch release, many users have had problems installing it.

Link