Skip to main content
Skip to main content
Microsoft Security Intelligence
Published Dec 13, 2011 | Updated Sep 15, 2017

TrojanSpy:Win32/Banker.ACM

Detected by Microsoft Defender Antivirus

Aliases: TR/Spy.Banker.Gen (Avira) PWS-Banker.gen.aa (McAfee) Mal/Banker-U (Sophos) Mal_Banker4 (Trend Micro)

Summary

TrojanSpy:Win32/Banker.ACM is a trojan that captures user-entered data for certain targeted websites and sends the collected information to specific email addresses for collection by an attacker. The list of sites targeted include numerous online banking sites.

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.

This trojan attempts to steal sensitive and confidential information from affected users to perpetrate fraud. If you believe that your personal financial information may have been compromised, please refer to the following advisory for additional advice:
Follow us