Sınıf: Trojan-Banker
Trojan-Banker programları, çevrimiçi bankacılık sistemleri, e-ödeme sistemleri ve plastik kart sistemleri ile ilgili kullanıcı hesap verilerini çalmak üzere tasarlanmıştır. Veriler daha sonra Truva'yı kontrol eden kötü niyetli kullanıcıya iletilir. Çalınan verileri aktarmak için e-posta, FTP, web (bir istekte bulunan veriler dahil) veya başka yöntemler kullanılabilir.Platform: Win32
Win32, 32-bit uygulamaların yürütülmesini destekleyen Windows NT tabanlı işletim sistemlerinde (Windows XP, Windows 7, vb.) Bir API'dir. Dünyanın en yaygın programlama platformlarından biri.Aile: Trojan-Banker.Win32.ClipBanker
No family descriptionExamples
29C766461F6BF72B37E49A05A811DF3280F49498A1A206A8861BA6AE1BF70B57
6E33DC583DC2E4DD0561F891E07A8371
9F23FAB15BD5D58A0AD4FB1988F7BC40
E3263DDDA1E59BC7090445BBDF19D7E3
Tactics and Techniques: Mitre*
TA0009
Collection
The adversary is trying to gather data of interest to their goal.
Collection consists of techniques adversaries may use to gather information and the sources information is collected from that are relevant to following through on the adversary's objectives. Frequently, the next goal after collecting data is to steal (exfiltrate) the data. Common target sources include various drive types, browsers, audio, video, and email. Common collection methods include capturing screenshots and keyboard input.
Collection consists of techniques adversaries may use to gather information and the sources information is collected from that are relevant to following through on the adversary's objectives. Frequently, the next goal after collecting data is to steal (exfiltrate) the data. Common target sources include various drive types, browsers, audio, video, and email. Common collection methods include capturing screenshots and keyboard input.
T1115
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
For example, on Windows adversaries can access clipboard data by using
macOS and Linux also have commands, such as
For example, on Windows adversaries can access clipboard data by using
clip.exe or Get-Clipboard.(Citation: MSDN Clipboard)(Citation: clip_win_server)(Citation: CISA_AA21_200B) Additionally, adversaries may monitor then replace users’ clipboard with their data (e.g., Transmitted Data Manipulation).(Citation: mining_ruby_reversinglabs)macOS and Linux also have commands, such as
pbpaste, to grab clipboard contents.(Citation: Operating with EmPyre) * © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.