We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
PWS:Win32/Cimuz.gen
Detected by Microsoft Defender Antivirus
Aliases: Trojan-Spy.Win32.BZub.js (Kaspersky) Spy-Agent.ba (McAfee) W32/BZub.ZK (Norman) Mal/Behav-102 (Sophos) Goldun.Fam (Sunbelt Software) Infostealer.Bzup (Symantec) TSPY_BZUB.IT (Trend Micro)
Summary
PWS:Win32/Cimuz.gen is a password stealing Trojan. PWS:Win32/Cimuz.gen runs as a browser helper object, retrieves stored login credentials for financial institutions, and may send data to a remote Web site.
PWS:Win32/Cimuz.gen may be installed by other downloader or dropper Trojans, including TrojanDownloader:Win32/Nurech.gen!B.
PWS:Win32/Cimuz.gen may be installed or downloaded by additional malicious software, thus manual removal is not recommended. To detect and remove this Trojan and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as the Microsoft Safety Scanner (http://go.microsoft.com/fwlink/?LinkId=212742). For more information, visit http://www.microsoft.com/athome/security/downloads/default.mspx
Follow us
