thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Banking Trojan

A trojan designed to steal online banking credentials and manipulate financial transactions.

Definition

Banking trojans use web injects, form grabbing and man-in-the-browser techniques to capture logins and alter transfer details in real time. Families such as Zeus, Dridex, TrickBot and QakBot later evolved into general loaders for ransomware. Mobile banking trojans use overlay attacks on Android.

Example

A web inject adds a fake "security question" field to a bank's login page to collect extra data.

Exam tip

Man-in-the-browser attacks defeat TLS because they operate inside the browser after decryption.

Related terms