Online banking malware: make sure your AV is upto date

[Bikerdude]

just read this over on techspot -

 

- malware specifically designed to target online banking

[Tels]

Such malware is not new, but still a large threat to users, because:

 

* they infrequently update or patch their systems (some of these malware things come on your system through year-old holes, esp. in Adobe Reder and Java)

* their AV is either not uptodate, or just doesn't know the new malware yet (having an up-to-date AV does not neccessarily prevent the attack because it might be detected only on the day after!)

* when the malware has infected the system, it patches the website of any bank the user surfes to (even if this is going encrypted via SSL!) and adds extra input fields for CC numbers, PINs, or TANs etc. (And most users are not smart enough to NOT enter their data there - because to them it looks like a trusted page from their bank!)

 

Btw, formerly it was "money mules", now it is "goods mules" - people who receive goods shipped to them bough with stolen credit card numbers, or transfered from the account with the method above. They then repacke these goods and reship the to somewhere else - after a few steps it ends up in a black market somewhere in Russia or someplace else - might be even a warehouse back in New York...

 

So if you have anyone who thinks they can "work" from home for someone by receiving packages at home and then reship them somewhere else - strongly advise them to NOT do this, and if they do, stop doing it. And get a laywer ASAP and possible also notify the police. Otherwise they are just abused as a fence - and while this is fun in a game like TDM - in real life it's a criminal offence in most parts of the world.

[Glyph Seeker]

Just doing a big ol' deep scan of my 'puter with Ad Aware, Malware bytes and Security Essentials.

[nbohr1more]

Microsoft outsourced it's OS development to China and India. The DNS blackhole has been open for years. Make sure you've got Fraud protection on yer cards... Oh wait.. They aren't worth the plastic they're printed on because of the financial meltdown that was partly caused by software that used same faulty equation... We're already in the matrix folks.

[stumpy]

Even better dont have online banking.

Edited February 9, 2012 by stumpy

[Tels]

Even better dont have online banking.

 

The aforementioned malware kit also scans your harddrive for FTP passwords, login details to game services (no sure if Steam), email passwords, passwords in Firefox etc, intercepts passwords in web-mail services ect.

 

So you better not have ANY password stored on your computer, never enter any password on any website, well, maybe don't even go online. For a computer that is used to access online services, like this forum here, this isn't really an option, tho.

 

So the advice here is to better update all your software and the OS in a timely manner, and use a more secure OS instead of Windows (pick any of Mac, Linux, BSD, or Android here).

[betpet]

*installs linux*