IBM researchers have found signs that the prolific data steal Trojan is now being used to attack widely used password managers.
In a troubling new development for Internet users, attackers have started using the prolific Citadel Trojan to compromise the password managers used by many to store and protect their login credentials for online accounts.

Such attacks could allow criminals to gain access to multiple online accounts, along with credit card, bank account, and other information that users frequently store in password managers.

Citadel has been around since at least 2012 and is believed to have compromised millions of systems worldwide. The Trojan has mainly been used to steal banking credentials from online users, though recently it was also associated with targeted attacks against petrochemical companies in the Middle East.

Read more at – New Citadel Attack Targets Password Managers