Cybercriminals are spreading LdPinch.ZO, a trojan that specifically targets corporate data.
The malware reaches networks via email attachment or concealed internet download. Once activated, the trojan installs malicious code designed to steal passwords, login details and other private data, according to researchers at PandaLabs.
The malware allows attackers to control an infected machine from a remote location. The trojan also simulates clicking OK on firewall warnings when software alerts the user to a suspicious internet connection. LdPinch.ZO then mimics the user to access the web and steal information, according to reports, researchers said.
"Corporate espionage is just one of the multiple uses that this type of trojan can have," warned Luis Corrons, technical director at PandaLabs. "Companies keep confidential information in their computers or email accounts. Thanks to this malicious code, a cybercriminal could get this data and sell it or use it for their own benefit."
