Kategorie: Trojan-Banker
Trojan-Banker-Programme dienen dazu, Daten von Benutzerkonten in Bezug auf Online-Banking-Systeme, E-Payment-Systeme und Plastikkartensysteme zu stehlen. Die Daten werden dann an den böswilligen Benutzer übermittelt, der den Trojaner kontrolliert. E-Mail, FTP, das Internet (einschließlich Daten in einer Anfrage) oder andere Methoden können verwendet werden, um die gestohlenen Daten zu übertragen.Mehr Informationen
Plattform: Win32
Win32 ist eine API auf Windows NT-basierten Betriebssystemen (Windows XP, Windows 7 usw.), die die Ausführung von 32-Bit-Anwendungen unterstützt. Eine der am weitesten verbreiteten Programmierplattformen der Welt.Familie: Trojan-Banker.Win32.ClipBanker
No family descriptionExamples
29C766461F6BF72B37E49A05A811DF3280F49498A1A206A8861BA6AE1BF70B57
6E33DC583DC2E4DD0561F891E07A8371
9F23FAB15BD5D58A0AD4FB1988F7BC40
E3263DDDA1E59BC7090445BBDF19D7E3
Tactics and Techniques: Mitre*
TA0009
Collection
The adversary is trying to gather data of interest to their goal.
Collection consists of techniques adversaries may use to gather information and the sources information is collected from that are relevant to following through on the adversary's objectives. Frequently, the next goal after collecting data is to steal (exfiltrate) the data. Common target sources include various drive types, browsers, audio, video, and email. Common collection methods include capturing screenshots and keyboard input.
Collection consists of techniques adversaries may use to gather information and the sources information is collected from that are relevant to following through on the adversary's objectives. Frequently, the next goal after collecting data is to steal (exfiltrate) the data. Common target sources include various drive types, browsers, audio, video, and email. Common collection methods include capturing screenshots and keyboard input.
T1115
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
For example, on Windows adversaries can access clipboard data by using
macOS and Linux also have commands, such as
For example, on Windows adversaries can access clipboard data by using
clip.exe or Get-Clipboard.(Citation: MSDN Clipboard)(Citation: clip_win_server)(Citation: CISA_AA21_200B) Additionally, adversaries may monitor then replace users’ clipboard with their data (e.g., Transmitted Data Manipulation).(Citation: mining_ruby_reversinglabs)macOS and Linux also have commands, such as
pbpaste, to grab clipboard contents.(Citation: Operating with EmPyre) * © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.