USB Trojan in the wild

[sman]

- Quote

Researchers at ESET have discovered a sophisticated data-stealing USB Trojan that leaves no trace on the compromised system and includes a self-protection mechanism that makes it difficult to detect, copy and analyze.

The threat, dubbed by the security firm “USB Thief,” has been spotted on USB devices in the wild. One aspect that makes it stand out from other USB malware families is that each copy is bound to a single USB drive.

Unlike other USB threats that leverage autorun and shortcut files to get executed, USB Thief relies on the fact that users often store portable versions of Firefox, NotePad++, TrueCrypt and other popular applications on USB sticks.

According to ESET, the malware injects itself into the execution chain of such applications by posing as a plugin or a DLL file. When a victim launches the targeted app from an infected USB drive, the Trojan is also executed in the background.

- Unquote

read the rest in http://www.securityweek.com/sophisticated-usb-trojan-spotted-wild