The source code for a small but capable malware program that targets online bank accounts has been leaked.
According to CSIS Security Group, and reported by PC World, the program known as “Tinba” or “Zusy,” was discovered around mid 2012 and infected tens of thousands of computers in Turkey. It is notable for having a very small code base—just 20K—but capabilities similar to malware much larger in size.
Last week, CSIS found a post in an underground forum that included source code for Tinba, which turned out to be the same code studied a couple of years ago by the company, wrote Peter Kruse, CTO of CSIS.