Name of Malware: Sphinx (Zeus Sphinx, OpenSSL Sphinx)

Type of Malware: Banking trojan

Affected Operating Systems: Windows

Affected Device Types: PCs, laptops

Impact: high

What is Sphinx?

Sphinx is based on the common open-source malware Zeus. Like Zeus, Sphinx is a banking trojan that is designed to
steal banking information and commit fraud using this information.

How did I get infected with Sphinx?

Like Zeus, Sphinx is primarily disseminated as an e-mail attachment in spam e-mails. The malware is hidden in
documents that appear genuine. Sphinx can also be downloaded and installed by other malware that has previously infected the system.

What do I have to do now?

As the malware takes full control of the system and often hides your files, you may need to
reformat/reinstall your operating system.

Further information on removing this malware can be found under Removing infections from PCs, laptops etc.

Technical specifications

Further information on this malware can be found on the website of our project partner Fraunhofer FKIE.