Avast warns about “fiscal” mail that steals bank data

The new attack steals browser passwords, customer emails, clipboards, and website login credentials by detecting keystrokes made by the user while entering data.

It also steals information about the user’s computer and replaces crypto wallet addresses on the clipboard; Therefore, the main objectives are detected in the information and financial resources of the victims.

modus operandi

The banking Trojan is spreading via emails from phishing which include a “digital tax receipt” (a digital tax receipt has been sent to you).

The attached file is an HTML file called an “invoice” that leads to a web page. The webpage displays an image of an invoice with a download link below it.

When the link is opened, a file with a malicious script inside is downloaded. Once the file is clicked, the malware downloads and starts stealing information.

How to protect yourself?

Avast recommends having an antivirus. A solid antivirus tool from a reputable provider will automatically keep Trojans out of your device.

Choose one that works as a removal tool malware that can also detect and remove Trojans and other malware from your devices.

Do not open unknown email attachments or click on strange links. Fraudulent emails are a popular method of spreading Trojans.

Don’t click on attachments or links in emails you don’t expect to receive; even if the email looks legitimate, it can be spoofed by a hacker.