View source for Say hello to Tinba: world’s smallest trojan-banker

{{Publication
|Image=Say_hello_to_Tinba.png
|Legend=
|Document=
|Licence=
|Video=
|Link=http://www.csis.dk/en/csis/news/3566/ www.csis.dk
|Author=Peter Kruse, 
|NomRevue=CSIS News
|Date=2012-05-31 11:57:42
|Editor=CSIS
|Year=2012
|ISBN=
|Page=
|Abstract=CSIS Security Group A/S has uncovered a new trojan-banker family which we have named Tinba (Tiny Banker) alias “Zusy”. 

Tinba is a small data stealing trojan-banker. It hooks into browsers and steals login data and sniffs on network traffic. As several sophisticated banker-trojan it also uses Man in The Browser (MiTB) tricks and webinjects in order to change the look and feel of certain webpages with the purpose of circumventing Two factor Authentification (2FA) or tricking the infected user to give away additional sensitive data such as credit card data or TANs. 

Tinba is the smallest trojan-banker we have ever encountered and it belongs to a complete new family of malware which we expect to be battling in upcoming months. 

The code is approx 20KB in size (including config and webinjects) and comes simple and clear without any packing or advanced encryption. Antivirus detection of the analyzed samples is low.
|Botnet=, 
|Malware=Tinba, 
|CCProtocol=, 
|Operation=, 
|Keyword=, 
}}