The Sinowal Trojan, also known as Torpig and Mebroot, isn’t new. It was first detected by RSA’s Fraud Action Research Lab in February 2006. But it’s one of the most effective Trojans out there. RSA estimates the Sinowal Trojan has taken the details of 270,000 online bank accounts and 240,000 debit and credit cards from financial institutions in a number of countries, including the US, UK, Australia and Poland. Interestingly, however, RSA has no data on any Russian accounts being hit.
Users are often infected by drive-bys – visiting a site infected with the Sinowal malicious code. Sean Brady of RSA’s security division told the BBC:
