Computer hackers use pop-up virus to steal bank details

Published on Monday 5 July 2004 01:09

HACKERS have found a new method of stealing bank details from home computers.

A virus uncovered last week was hidden inside so-called "pop-up" adverts that appear on screen without warning, experts warned yesterday.

Clicking on the "close" button to get rid of the advert triggered the virus to attempt to secretly install itself on the computer.

The bug was programmed to wait until the user began logging on to their internet bank account where it tried to steal personal details, such as passwords, before the information reached the bank.

The latest virus, with the file name img1big.gif, differs from other attacks on internet bank customers which have seen a big rise recently.

Most rely on users visiting bogus bank sites after receiving an e-mail asking them to update their details, or by noting the sequence in which the user types details on their keyboard.

The new virus was aimed at customers of nearly 50 banks around the world including Lloyds TSB and Barclays in the UK.

The internet security firm Symantec, which has monitored the virus, has given it the name pwsteal.refest.

Richard Archdeacon, the company’s director of technical services, said: "Most viruses of this kind going around try to capture information such as passwords by how they are typed in.

"This one was slightly different because it came through a pop-up advert.

"The virus will then be put on your PC and it will try to get your information at the stage where the details are being sent to the bank.

"The immediate danger may be over but the risk is that infected computer may still have the vulnerability which means the same thing could happen again anytime.

"The best advice for users is to make sure their anti-virus software is kept up-to-date."

A spokeswoman for the National Hi-Tech Crime Unit said: "This is a type of virus we have not seen before but it isn’t a surprise. When criminals find that one thing doesn’t work they will try another way."

She added that cyber bank crime - known as "phishing" - was on the rise.

"Since last September we have seen a massive increase in the number of attempts to try and dupe people out of their bank information. We are working with the banking industry to educate their customers."

Barclays said it was aware of the latest virus but could not disclose how many customers had been affected.