We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
PWS:Win32/Cimuz.C
Detected by Microsoft Defender Antivirus
Aliases: Win32/Brospy.EU (CA) Trojan-Spy.Win32.BZub.ie (Kaspersky) Spy-Agent.ak (McAfee) Infostealer.Bzup (Symantec) TSPY_BZUB.DC (Trend Micro)
Summary
PWS:Win32/Cimuz.C is a password stealing Trojan that installs itself as a Browser Helper Object (BHO) in Microsoft Internet Explorer. The Trojan monitors Web traffic for sites related to certain German banks. When these sites are visited, PWS:Win32/Cimuz.C begins logging keystrokes and attempts to send that log to a remote Web site. The Trojan also attempts to download a file from a remote Web site.
To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
Follow us
