Trojan.DanaBot
ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.
Short bio
Trojan.DanaBot is Malwarebytes’ detection name for a large family of banking Trojans targeting Windows systems.
Type of infection
Trojan.DanaBot is a banking Trojan. Banking Trojans mainly focus on stealing finacial information from affected systems. Trojan.DanaBot is spread through exploit kits and malicious spam. At first it focused on Australia but it has expanded to North America and Europe.
Aftermath
- Data/information about the system may have been stolen
- User credentials may have been stolen
Protection
Malwarebytes blocks Trojan.DanaBot
Home remediation
You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.
Nebula endpoint tasks menu
Choose the Scan + Quarantine option. Afterwards you can check the Detections page to see which threats were found.
On the Quarantine page you can see which threats were quarantined and restore them if necessary.
Associated threats
- Backdoor.DanaBot
- Spyware.DanaBot