We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanSpy:Win32/Banker.gen!C
Detected by Microsoft Defender Antivirus
Aliases: Backdoor.Win32.VB.ilc (Kaspersky) Trojan.Banker.LEM (BitDefender) Win32/Spy.Bancos.NLN (ESET) PWS-Banker!h (McAfee) Infostealer.Bancos (Symantec)
Summary
TrojanSpy:Win32/Banker.gen!C is a generic detection for a member of the Win32/Bancos malware family. Win32/Bancos is a family of data-stealing Trojans that captures online banking credentials, such as account login names and passwords, then relays the captured information to the attacker. Most Win32/Bancos variants target customers of Brazilian banks, though some variants target customers of banks in other locations.
Manual removal is not recommended for this threat. Use Microsoft Security Essentials or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.