Researchers from Trusteer have discovered a new Banking Trojan called “Kronos”And is sold in a Russian Underground forum.
The malicious software is sold for $7.000 and the developers who developed it offer a week test for $1.000. The trial period includes full access to the command and control server, without any restrictions.
Like other banking Trojans, new malware can steal logins and perform HTML Injection (C&C).
Kronos acts as a rootkit (Ring3) and has features that allow it to defend itself from other comeyea malware and antivirus. Works on 32 and 64 bit operating systems.
As we mentioned above it is designed to avoid antivirus software and bypass Sandbox. It communicates with the C&C server using encryption.
Trusteer said it had not yet analyzed a sample of the malware, and that all of the information it published was based on the "product" ad posted on the underground forum.