TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
TSPY_EBBOT.A
Overview

QUICK LINKS  

Download the latest scan engine


TypeSpyware

In the wild: No

Destructive: No

Language: English

Systems affected: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Overall risk rating:

Low

Reported detections:

Low

System  impact:

High

Information exposure:

High

 

Description:

To get a one-glance comprehensive view of the behavior of this spyware, refer to the Behavior Diagram shown below.

TSPY_EBBOT.A Behavior Diagram

Spyware Overview

This spyware arrives on a system as a file downloaded by other grayware.

It works as a distributed brute force attacker on eBay. It accesses certain URLs to retrieve combinations of encrypted user names and passwords that were possibly gathered from phishing Web sites.

The account information are then used for authenticating and authorizing eBay transactions, thus allowing remote users to conduct anomalous transactions.

For additional information about this threat, see:
Solution
Technical Details

Description created: Sep 10, 2007

Revision history: 
Sep 12, 2007 - Modified Grayware Report
Sep 27, 2007 - Complete Spyware Report




Tell us how we did. Take our quick survey.