RTKT_NECURS.RBC

The RTKT_NECURS.RBC Trojan is a variant of Necurs, a family of Trojans used as part of various high profile threat attacks. The RTKT_NECURS.RBC variant is part of a threat attack that is associated with a spam email campaign that distributes variants of the Upatre Trojan using fake email messages from important financial institutions. This spam email campaign will use email messages that claim to come from Lloyds, Wells Fargo and other financial institutions as a way to get the victims' money. It is important to note that RTKT_NECURS.RBC represents a real, severe threat to computers and to the computer users' privacy and resources. For this reason, PC users should take measures to avoid social engineering tactics such as the spam email campaign linked to RTKT_NECURS.RBC, and use reliable security software to protect their computers.

The Threat Campaign Linked to RTKT_NECURS.RBC

RTKT_NECURS.RBC is part of a threat campaign that involves various unsafe components. Spam email messages associated with this hoax will claim that your financial institution has sent you a secure message in the form of a file in MSG format. The email message claims that you need to open this file to view the supposed message. PC security researchers have analyzed these MSG files and realized that they contain another MSG file, which itself is used to hiding a variant of the Upatre Trojan, a threatening Trojan downloader. Security researchers believe that the method of containing one MSG file inside another is a way for cybercrooks to bypass certain security programs and anti-spam filters.

Once the Upatre Trojan is installed, it connects to a remote server and downloads a ZeuS Trojan variant. This threat may monitor the victim's computer and download and install RTKT_NECURS.RBC. The role of RTKT_NECURS.RBC in this attack is to disable all security software on the victim's computer, making it more vulnerable to other threats and to attacks from other threat components involved in this multi-step threat attack. Protect your computer from RTKT_NECURS.RBC with a fully updated anti-malware program.