Lock, stock and two smoking Trojans-2It has been three years since we published Lock, stock and two smoking Trojans in our blog. The article describes the first piece of malware designed to attack users of online banking software developed by a company called BIFIT. There are now several malicious programs with similar functionality, including:
- Trojan-Spy.Win32.Lurk
- Trojan-Banker.Win32.iBank
- Trojan-Banker.Win32.Oris
- Trojan-Spy.Win32.Carberp
- Trojan-Banker.Win32.BifiBank
- Trojan-Banker.Win32.BifitAgent
In spite of its functionality no longer being unique, the last program on the list caught our attention.

Words and strings used by Trojan-Banker.Win32.BifitAgent
This particular piece of malware has a number of features that set it apart from other similar programs.
Source:
Lock, stock and two smoking Trojans-2