World’s smallest banking trojan discovered

The world’s smallest banking trojan has been detected.

Named ‘Tinba’ (Tiny Banker) or ‘Zusy’, it is a 20KB data-stealing banking trojan that hooks into browsers, steals login data and sniffs network traffic. It also uses man-in-the-browser (MiTB) techniques and web injections in order to change the look and feel of curtain webpages with the purpose of circumventing two-factor authentication or to trick the infected user to give away additional sensitive data.