A new and improved virus has been detected that not only has a built in keylogger, but can actually steal data from an SSL stream. This is some really scary stuff.
This version of Gozi also has a new keystroke logging capability for stealing data, in addition to its ability to steal data from SSL streams. According to Jackson, the keystroke logger appears to be activated when the user of an infected computer visits a banking Web site or initiates an SSL session. It is still unclear how exactly the keystroke logger knows to turn itself on and capture information, Jackson said.