The Trojan will also delete files inside the program's folder.

Feb 10, 2005 07:07 GMT  ·  By

The BankAsh-A is the first to mess with Microsoft's attempt to clear the world of spyware and is taking aim at Microsoft AntiSpyware Beta, suppressing all warning messages the package might display.

That's not all though, the Trojan will also delete files inside the program's folder. But the damage is not so bad considering BankAsh-A doesn't make any attempt to disable other anti-virus applications installed an running on the victim system.

However, you're not to take this trojan lightly as its main function is to steal online banking passwords from unsuspecting Windows users. BankAsh-A targets users of UK online banks such as Barclays, Cahoot, Halifax, HSBC, Lloyds TSB, Nationwide, NatWest, and Smile.

The malware records passwords and keystrokes once users of infected machines visit targeted websites. After all this valuable information is stolen it will get to hackers at a safe distance, where they can easily empty back accounts as they please.

Instead of spreading under its own Steam, BankAsh-A has to be distributed by either spam emails or by loading it onto a maliciously constructed website. Anti-virus firms say they've received a handful of reports of the Trojan. The APACS banking group and British police warn that the use of malicious code and phishing scams is beginning to eclipse conventional phishing attacks in its severity.

Guidelines on how banking customers can avoid being hacked by his trojan can be found here