Skip to content
MalwareWiki

Banking trojan

KrBanker

aka BlackMoon

ThreatPost describes KRBanker (Blackmoon) as a banking Trojan designed to steal user credentials from various South Korean banking institutions.

KrBanker, also known as BlackMoon, is a Windows banking trojan.

Background

Per ThreatPost, KRBanker (Blackmoon) is a banking trojan built to harvest the login credentials of customers at a range of South Korean banks. First seen in early 2014, it has since cycled through several different infection vectors and credential-theft methods.

Source: Malpedia (Fraunhofer FKIE).