Dridex, a new banking virus, has been attacking the online banking services users in Romania. The virus has been stealing the login data of two local banks’ customers, according to Bitdefender.

Dridex uses two methods to capture the login data, namely it takes screenshots at every mouse click, or it uses a module that injects code in the authentication page, reports local Economica.net. The virus spreads through a file attached to spam messages, or through links which download the virus when they are accessed.

The messages were sent between August 10 -17 and appear to be from Romanian companies. They claim to share important financial documents for the user.

editor@romania-insider.com