Computer Security Research - McAfee Avert Labs Blog

There’s a very interesting article at: Computer Security Research - McAfee Avert Labs Blog talking about ways how crackers make it into your bank accounts. This time we are not talking about Phishing, but instead code-injection on your very own computer. The crackers will trick you into downloading a malicious piece of software onto your computer. Once installed, the software will monitor your browser traffic and will become active when you go to various banking sites. In one example, the software will bring up a legit looking error message telling you that the TAN you used is invalid and will ask you to enter another one. The falsely illegit TAN will be shipped off to the crackers and they can use it to make a transaction from your account.

  • never install stuff from unknown/untrusted sources.
  • run an application like SpyBot on a regular basis and make sure you keep it up-to-date.
  • double-/triple-check when you logon to your banking site. If something looks/behaves differently on the banking site, don’t go any further, but instead talk to your bank.

2 Responses to “ Computer Security Research - McAfee Avert Labs Blog ”

  1. March 31st, 2007 | 6:52 am

    You forgot about Run MacOS or FreeBSD suggestion ;-)

  2. Richard Albury
    March 31st, 2007 | 12:25 pm

    This Trojan is a Browser Helper Object and only works with Internet Explorer. Other browsers are not affected by this Trojan.

    Reason #143 not to use IE if you’re on Windows.

    Otherwise, I second Serhii’s comment. ;-)

Leave a reply

« « Online pdf-magazines (and WebPhotoMag in particular) | Is blog-spam still working? » »