An online tool billed as able to calculate the amount of money taken by poker sites is actually malware designed to steal online poker players’ login details.

The rakeback calculator RBCalc.exe, which was distributed on gaming site Checkraised.com, creates a backdoor into users’ computers to covertly store gamblers’ information.

The program silently drops four executable files into the player’s system and uses a rootkit driver to conceal the operation.

The tool’s author could then steal log-in information for various online poker websites including Partypoker.com, Empirepoker, Eurobetpoker and Pokernow.
Having gained access, the hacker could then empty the compromised account by playing poker against themselves and losing on purpose.

[url=http://www.vnunet.com/actions/trackback/2156270]vnunet[/url]

---

Filed under: Security - @ May 18, 2006 5:35 am