Trojan.HTML.Downloader.Agent.NBF

The many variants of the Zbot Trojan are well-known malware threats that are responsible for tremendous financial losses all around the world. This family of banking Trojans is one of the most common tools that hackers use to steal credit card numbers, banking data, and account numbers and passwords. One of the reasons why Zbot Trojans are so common is because the code for the Zeus Trojan is readily available in underground hacker communities and torrent trackers. Criminals can then customize their own malware delivery vehicles in order to install their particular variant of the Zeus Trojan or Zbot Trojans on their victim's computer systems.

ESG security analysts have found a dangerous web page detected as Trojan.HTML.Downloader.Agent.NBF, which delivers the Zbot Trojan into their victim's computer with the help of a well-known JavaScript exploit. Trojan.HTML.Downloader.Agent.NBF should be blocked with legitimate security software, and it is important to keep your JavaScript disabled for unknown websites or your browser security settings at a maximum, in order to prevent malicious websites like the one containing the Trojan.HTML.Downloader.Agent.NBF attack to infect your computer system easily.

How Trojan.HTML.Downloader.Agent.NBF Attacks Your Computer System

Although the malicious website appears innocent on the surface, visiting it reveals a message claiming that the Page is loading... However, while the victim waits, a JavaScript applet is being loaded in the background which redirects the victim to an attack web page containing the elements that carry out the actual attack which exploits the victim's security vulnerabilities. Trojan.HTML.Downloader.Agent.NBF loads a malicious Java Applet, which exploits one of the most insidious and well-known JavaScript exploits that are known (CVE-2010-0840) in order to force the infected computer system to install one of the many variants of the Zbot Trojan, Trojan.Zbot.HTQ.

This Trojan, which has several aliases (such as Zeus, or WSNPoem), is an extremely dangerous banking Trojan. However, this Trojan infection acquired from Trojan.HTML.Downloader.Agent.NBF, does not stop at trying to steal your banking information. It has the capacity to connect to a remote server, allow criminals to take over your computer system freely, and automatically integrate the infected computer into a vast botnet used to carry out illegal activities. In fact, once the Zbot variant from Trojan.HTML.Downloader.Agent.NBF is installed on a computer system, the infected system is basically in the hands of criminals, who can then install any other malware they wish, retrieve any information from the compromised computer, or directly use the infected computer system from their remote location.