Chinese Government website hosting Trojan Keylogger

Websense Security Labs(RM) has discovered that one of the Chinese Government websites associated with the domain appears to have been compromised and is hosting malicious code. This website is not hosted on the same machine as the main website.

The site, which resembles one of the State of Shan Xi's Agricultural sites, is hosting two different pieces of malicious code that are banking-based Trojan horse keyloggers. The site is also hosting a web page that is designed to dupe users into running the malicious code. The HTML is written in Portuguese, and the keyloggers appear to be targeting Brazilian banks. WebsenseŽ - Security Labs Alert: Chinese Government website hosting Trojan Keylogger

Linked by shanmuga Thursday, 15th December 2005 12:52AM