

In June 2009 security company Prevx discovered that Zeus had compromised over 74,000 FTP accounts on websites of such companies as the Bank of America, NASA,, ABC, Oracle,, Cisco, Amazon, and BusinessWeek. First identified in July 2007 when it was used to steal information from the United States Department of Transportation, it became more widespread in March 2009. Zeus is spread mainly through drive-by downloads and phishing schemes.

It is also used to install the CryptoLocker ransomware. While it can be used to carry out many malicious and criminal tasks, it is often used to steal banking information by man-in-the-browser keystroke logging and form grabbing. Zeus, ZeuS, or Zbot is a Trojan horse malware package that runs on versions of Microsoft Windows.
