The attackers behind the raft of banker Trojans emanating from Brazil are continuing to refine their craft and learn new tricks. Their latest efforts have seen them going to greater lengths than ever to obfuscate their creations and hide their true functionality in order to evade detection and analysis by security software. Encryption has come into vogue in some malware circles, as well, and now the denizens of the Brazilian malware underground have taken to using crypto as a key element of their download-and-infection routines. Once the malware is on a victim s machine, it not only steals sensitive financial information, it likely also will kill any security software and anti-malware software.
Source: https://threatpost.com/inside-banker-trojan-040810/73799/