In mid-December, malware developers launched a new version of the notorious Carberp Trojan, a threat designed to steal sensitive information from infected devices.
The first spam campaign for distributing the new version of the malware, detected as Trojan.Carberp.C, was spotted by
Symantec researchers on December 15, just one day after the Trojan was apparently compiled.
Carberp.C, like its predecessors, is primarily designed to harvest information, but it can also carry out other tasks with the aid of plugins that are injected into a newly created process (svchost.exe). One of the plugins analyzed by researchers hooks APIs in an effort to steal usernames, passwords and other sensitive data from Web browsers.
The malware is capable of infecting both 32-bit and 64-bit systems and its authors have developed plugins for various CPU architectures, researchers said.
