- Threat Encyclopedia
- Malicious URL
- http://200-98-200-41.{BLOCKED}ol.com.br
WORM_LUDER.USR sends the gathered information—such as account names, email addresses and passwords by monitoring web activities and logging keystrokes—via HTTP POST to this URL. This malware arrives via a homemade browser targeting “Banco de Brasil” users.