We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanProxy:JS/Banker.M
Aliases: Trojan-Banker.JS.Proxy.ae (Kaspersky) JS/Banker.T (Avira) Win32/Spy.Banker.XLF trojan (ESET) Trojan-Banker.JS.Proxy (Ikarus) Trojan-Banker.JS.Proxy.ae (Kaspersky)
Summary
TrojanProxy:JS/Banker.M is a JavaScript trojan that intercepts communication between an infected computer and certain online banking websites, resulting in the possible theft of logon credentials or other sensitive information.
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:
- Microsoft Security Essentials
- Microsoft Safety Scanner
- Microsoft Windows Malicious Software Removal Tool
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
If you think you have been the victim of this malware and your banking details have been stolen, you can refer to Microsoft's advice on what to do if you are a victim of fraud.
