Security experts today warned instant messaging (IM) network users to beware of a newly intercepted trojan named W32/Banbra.BOK, which is using the rise in holiday season web commerce to secretly steal banking passwords from unwitting surfers.