|
Description:
This spyware family usually arrives as a file downloaded unknowingly by a user when visiting malicious Web sites or as a file dropped by other malware, usually by PE_LOOKED malware family.
It steals information, typically account names and passwords, related to certain online games, such as Lineage, Ragnarok Online, and Legend of Mir. It sends the gathered information as a URL argument to a certain Web site.
It may also save the gathered information in a file which it sends to a remote malicious user via email using its own Simple Mail Transfer Protocol (SMTP) engine. The said routine allows it to send email messages without using a mail application like Microsoft Outlook.
|