VB Migration

Tag: banking

  • Trojan steals money from bank accounts via ‘training session’

    Social engineering circumvents banking security In a new method of stealing money from customer accounts, a variant of the SpyEye trojan invites the user to make a supposedly dummy transfer, thus socially engineering them into manually sending money to the attackers, security company Trusteer reports. Most banks have secured their online banking systems by having…

  • Bank’s Twitter account hacked to send phishing messages

    Important lessons for companies engaging in social media. Last week, the Twitter account of the Bank of Melbourne was hacked and used to send direct messages containing phishing links to its followers. A recently relaunched subsidiary of Westpac , the Australian bank engages heavily with its customers through its @BankofMelb Twitter account. However, the security…

  • Banking malware tells user to ‘refund’ money

    Web injection used to suggest accidental transfer. In a new twist to banking trojans, a piece of malware found on German computers tricks victims into believing a large amount has accidentally been transferred to their account and asks them to refund the money. Banking malware has become very sophisticated in recent years and several instances…

  • Trojan uses remote user account to control compromised machine

    Malware targets customers of Brazilian banks. Researchers at Kaspersky have discovered a piece of malware aimed at customers of Brazilian banks which creates a remote user account to enable attackers to take full control of the compromised machine. The malware is spread via an email that poses as an update to Flash Player . Although…

  • Zitmo trojan for Android defeats two-factor authentication

    Malware intercepts TANs sent via SMS. A new variant of the Zitmo trojan has been discovered that infects mobile devices running the Android platform and which intercepts SMS messages from banks sending mobile TAN numbers, thus potentially defeating two-factor authentication. Two-factor authentication is used by many banks to prevent a customer’s online banking account being…

  • US court: passwords reasonable security for online banking

    Security question considered second authentication factor. A US court has declared that a combination of passwords and ‘security questions’ is an ample way for banks to protect their customers’ online banking accounts. In May 2009, Patco , a Maine-based construction company became infected with the ‘Zeus’ (or ‘Zbot’) trojan which stole the company’s online banking…

  • Banking malware hosted on Amazon’s cloud servers

    Trojan targets mostly Brazilian banks. Researchers have discovered malware hosted on Amazon Web Services that steals victims’ bank account data. Acting as a rootkit, the malware attempts to deactivate at least four different anti-virus programs as well as a special security application used by many Brazilian banks to protect their customers’ online banking accounts. The…

  • 95% of spam monetized through three banks

    Financial infrastructure possible bottleneck for spammers. In a recently published paper, researchers from the University of California found that 95 per cent of spamvertised products are monetized through just three banks, thus showing a potential bottleneck that may help in the fight against spam. The researchers looked at almost one billion spamvertised URLs, or 93…

  • Users divided about customer liability for online fraud losses

    Many users worried about lack of knowledge. In a poll of more than 700 visitors to the VB website, users were divided on whether or not it is fair for online banking customers to be held liable for losses via phishing/online scams if they don’t have adequate protection on their PCs. While 46% of respondents…

  • Users of online banking ‘should have adequate protection’

    New UK banking code says customers who keep their PCs secure will not be responsible for losses due to online theft. A new banking code launched earlier this week by the British’ Bankers Association (BBA) states that customers who ‘use up-to-date anti-virus and anti-spyware software and a personal firewall’ cannot be held liable for losses…