Shylock , a banking Trojan named after Shakespeare's play "The Merchant of Venice," is constantly being improved by its developers, who have started adding some interesting new features, according to Symantec .
The latest versions of the Trojan enhance its functionality. Once it infects a computer, the malware starts downloading and executing various modules such as archiving video files and turning the infected computer into a proxy. It spreads via Skype, and collects all saved passwords.
The infrastructure has also been improved. Three groups of servers are used to ensure that the malware's command and control structure is robust.
So far, Shylock performs man-in-the-browser attacks to steal credentials, but it also uses social engineering tactics to trick its victims into executing transactions. Its targets so far are mainly UK financial institutions.
However, in recent months, attacks have been observed in other countries as well, such as Italy and the United States.
In addition to the banking sector, malware is now also targeting commercial websites, credit businesses, credit card companies, and post offices.
