The implications are staggering. Internet security software company Sunbelt Software was investigating CoolWebSearch, a spyware package, when it noticed that, stowing away in the CoolWebSearch download, were two other pieces of sofware - a spam zombie engine, and a keystroke logging program. It was the keylogger program which took the investigators’ breath away.

The keystroke logging program, undetectable by current anti-spyware and anti-virus programs, was scouring its machine for usernames, passwords, and bank account information, and reporting the information back to its mothership. And what a mothership it was. Or, perhaps, motherlode is a better term. Following the keylogger’s trail, Sunbelt’s Patrick Jordan found a massive server, located in Texas, to which thousands of machines infected with the keylogger were reporting back daily. The keyloggers were filling up a log file as fast as they could with usernames, passwords, bank account information, and…

[Continue reading Millions of Windows Users at Risk by Massive ID and Bank Account Theft Piggybacking on CoolWebSearch]