Phisher.BH is a Trojan that sends phishing messages in order to obtain the passwords and the access keys of the user. These messages include a link to a website that imitates the original one and a copy of the Trojan.

Paypal, which offers a service of online payment, and certain Brazilian and Italian banking entities are among the affected companies.

In order to send the phishing, it uses the email addresses that it has obtained from the affected computer.


Phisher.BH does not spread automatically by its own means. It needs an attacking user's intervention in order to reach the affected computer.

Technical details can be found at this Panda Software page.