- Ursnif banking trojan
- Ursnif arrives as an attachment in a spammed email.
- Ursnif drops malicious component files onto the affected system. Creates autostart registries to ensure automatic execution upon startup.
- Ursnif injects itself into certain processes and infects files that have certain extensions.
- Ursnif gathers systems information such as digital certificates, active processes and cookies. This is sent to a C&C server.
