New powerful bot spreads by email

PandaLabs reported the presence of a powerful new bot called Ainslot.L. This malware is designed to log user activities, download additional malware and take control of users’ systems.

Additionally, it acts as a banker Trojan, stealing log-in information related to online banking and financial transactions. Ainslot.L also performs scans on the computer to seek and remove other bots, becoming the only bot on one’s system.

“The fact that Ainslot.L removes other bots from infected systems is something that definitely caught our attention,” explained Luis Corrons, technical director of PandaLabs. “What makes this bot different is that it eliminates all competition, leaving the computer at its mercy.”

Ainslot.L spreads via a fake email purporting to come from a UK clothing company called CULT. The message, which is very well-crafted, informs users that they have placed an order in the amount of 200 pounds on CULT’s online store and the invoice amount will be charged to their credit card. The text includes a link to view the order which actually downloads the bot onto the computer.

Corrons adds, “Phishing emails are not usually so well done and authentic in appearance. There is no doubt that fraudsters have been very careful in making this message look as real as possible in attempt to lure in as many victims as they can.”