The trojan not only retrieves banking credentials but also is directed to steal money from compromised accounts, often making it appear to the victim that it took less than it actually did.