Security experts from the Palo Alto Networks company have discovered a new Trojan aimed at stealing data from Skype for Desktop. On successful computer infecting, T9000 performs three tasks:
- If Skype program is running, the Trojan records the conversation, audio and video calls, as well as every 20 seconds makes screenshots.
- On all system and removable drives steal documents of various formats (including doc, docx, ppt, pptx, xls, xlsx), herewith doing encrypted copies.
- Tracks the operating system functions such as create/delete/copy/move files or directories, copy to clipboard, encrypt and decrypt data, and others.