Ju u 1.2
(Trojan-PSW.Win32.Agent.wb)
(Trojan-PSW.Win32.Agent.tr for Server)

by b0b

Released in November 2007


This is a simple firefox password stealer that sends the decrypted data from Firefox's signons2.txt to an email account and/or ftp server.

The email sending is mostly untested and considered to be in beta (works with gmail for sure, probably not hotmail though).
To eliminate the need for an smtp server, the Ju u server will preform an MX lookup to find the appropriate MX server for your email address.
Emails often get sent to the junkmail folder, so check that.

The server DOES NOT install itself in any way so it is safe to test on your own.


Server:
Size: 24,576 bytes



Tested on Windows XP
December 13, 2007

MegaSecurity