F-Secure Virus Descriptions : Cardst

NAME:	Cardst
ALIAS:	JS.Trojan.Cardst, Trojan.CardStealer, Trojan.AOL.HTML.Cardst
ALIAS:	HTML_CARDST.A, JS/Card, JS.Cardsteal.Trojan

JS.Trojan.Cardst is a trojan written in JavaScript. It tries to convince the user that it is AOL Billing Center. The contents of the html page includes a form in which the user is asked to fill the details about his creadit card, post address, phone numbers etc. Once this is done and the form submitted, the trojan sends all the data to the virus writer.

Picture of the fake page.

[Analysis: Katrin Tocheva; F-Secure Corp.; August 21st, 2002]