Brazilian Banking Trojan Imitating Avast Antivirus
Avast antivirus is one of the most popular antivirus software in Brazil. Because of this, virus writers in Brazil came up with a smart way of hiding or disguising their malicious software. The virus writers use Avast antivirus taskbar tray icon, which everyone is familiar with, to disguise their Trojan.
This malicious software is sent as an e-mail attachment disguised a PDF document and if open, will infect the victim's computer.
This Avast antivirus imitating Trojan will try to disable legitimate antivirus software and will steal your usernames and passwords (for your e-mail account, online banking etc).
This is how the Antivirus taskbar tray icon looks:
If you double click on the icon, the following dialog box will be displayed:
The text in the dialog box translates to: "Your Avast! Antivirus is being updated, wait."
If you receive any e-mail attachments, always check the file name extension; not because an e-mail attachment looks like a PDF or Word document, it doesn't mean it is. So, be careful when opening an e-mail attachment even if it appeared as if came from someone you know.
Any e-mail attachments with the following file name extensions should not be open: .exe, .scr, .com, .bat and .msi.
Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.
Note: Some of the information in samples on this website may have been impersonated or spoofed.