Backdoor.Briba

Backdoor.Briba is a dangerous backdoor Trojan that has been active since May of 2012. This relatively small Trojan infection infects computers with the Windows operating system and can infect versions of Windows released since Windows XP. Backdoor.Briba is characterized by its use of a Windows vulnerability known as CVE-2012-0779. Like its name indicates, the Backdoor.Briba Trojan opens a backdoor into the infected computer. Using this backdoor (a term used by malware analysts to bring up an unauthorized opening in the compromised computer's security protection), the Backdoor.Briba Trojan can download and install other malware threats on the victim's computer.

The Main Danger Associated with Backdoor.Briba

While the Backdoor.Briba Trojan itself is not the destructive component in a malware attack, Backdoor.Briba is the culprit that allows other malware to enter an infected computer. Using the back door that the Backdoor.Briba installs on the victim's computer, criminals can install other programs designed to monitor activity on the infected computer, control the infected computer from a remote location or scam the infected computer's user. Because of this, backdoor Trojans are the most common types of malware distributed via email scams and through attack websites. Once a backdoor Trojan has managed to infect a computer, it opens the floodgate, allowing all kinds of other malware to rush in and be used to attack the victim computer. Since Backdoor.Briba and other backdoor Trojans are usually distributed using social engineering tactics, ESG security researchers strongly recommend being careful when going online, downloading files, or clicking on unknown links.

How the Backdoor.Briba Trojan Attack Works

The Backdoor.Briba Trojan creates a malicious DLL file on the victim's computer. Then, it makes a change to the Windows Registry that allows Backdoor.Briba to execute its file automatically as soon as Windows starts up. Once installed, the Backdoor.Briba Trojan will attempt to connect to a remote server in order to download and run other files, which may contain configuration information for Backdoor.Briba or other malware threats. This threat repeats this process several times, installing various executable files on the victim's computer, making changes to the Windows Registry so they'll be executed automatically when Windows starts up and connecting to a remote server to download additional malicious content onto the victim's computer. If you assume that your computer has been in contact with Backdoor.Briba, ESG security researchers commend utilizing an appropriate anti-malware tool to scan your computer and to safeguard your susceptible information (such as your credit card details or online account passwords).