Originally Posted by Alice07

How an E-Gold Trojan Works

This Trojan does not employ usual phishing techniques, like logging user keystrokes in text files that can be sent to a remote malicious user. Instead, whenever a user tries to access the e-gold account login form via the URL http://e-gold.com/acct/login.html, it opens a hidden duplicate Internet Explorer (IE) window accessing that same URL. It then proceeds to fill up the duplicate Web form, which leads to illegal account access.

Your e-gold funds are then stolen and transferred to another e-gold account. To be able to successfully perform this function, this Trojan uses IE's built-in Object Linking and Embedding (OLE) automation functions. OLE is a compound document standard that enables a user to create objects with one application and then link or embed them in another application. the trojan executes certain functions for every change in the URL address that occurs while the user continues to navigate through all of the e-gold account web pages.