[News] New Trojan virus poses online banking threat

[OminousCloud]

Cyber criminals have created a highly sophisticated Trojan virus that steals online banking log-in details from infected computers.

The Clampi virus, which is spreading rapidly across hundreds of thousands of computers in Britain and the United States, infects computers when users visit websites that host a malicious code.

Once on the computer, the virus sits unnoticed until the user logs on to bank, credit card or other financial websites. It then captures log-in and password information and sends it to a server run by the attackers. They can then tell the compromised computer to send money to accounts that they control, or they can buy goods with the stolen credit card details.

The trojan has a list of more than 4,500 finance-related websites that it monitors, including British high street banks. Security experts warned that it was one of the stealthiest and most pervasive threats to computers using the Microsoft Windows operating systems.


(http://business.timesonline.co.uk/tol/business/industry_sectors/technology/article6841779.ece)
Click for more information (http://business.timesonline.co.uk/tol/business/industry_sectors/technology/article6841779.ece)

[Anime Forum]

Now this doesn't sound good. This will give criminals more powers and allow them to steal more money from people. Was this just discovered recently or has it been going on for quite some time?

[Miss Moonlight]

Doesn't worry me. My virus protection is always up to date, and should anything get through and access my bank account details, my bank will just reverse the damage. Not as if I have any money in there, anyway.

[Eris]

Three words: One-time password (http://en.wikipedia.org/wiki/One-time_password). Gotta love 'em. My bank utilizes the technology. I've got a small keypad that I've got to enter a password + a number string given by the internet bank login, that makes it print a number string back, that I can use to log in with. Works exactly once. I have to repeat the process when I do something like paying a bill or whatnot in the internet bank. Works really smooth, and about as safe as it can get.

[OminousCloud]

Wow, I didn't think anyone would actually respond to this.

@ Raiken, the article says the first 'big wave' was in July, so I'd say it's still new.

@ Miss Moon,
Orla Cox, security operations manager with Symantec, the online security company, said: “Clampi is a complex threat. People are only just beginning to understand how it operates.”

This suggests that there wouldn't really be an anti-virus thingy (that's a technical term) to protect against it yet.

@ Eris, that one time password seems awesome. But then, since it only affects Windows operating systems, not using Windows would also be awesome =D

[Sora Rosario]

Lucky I doin't do that. But that just show how much they are lazy to go out and find a job of their own.

But you should always have your computer check out for any of that stuff every two or few days just make sure nothing happens and go to the bank and not use the computer.

Those are just my advise to the people who uses the computer.

[Eris]

@ Eris, that one time password seems awesome. But then, since it only affects Windows operating systems, not using Windows would also be awesome =D

There's always platform neutral attacks (man-in-the-middle, etc). OTPs are hardy against them as well.

[Cobra Commander]

I wonder if my financial institutions even could use my web account to transfer money? All I ever do is pay my bill from my bank account, info for which is encrypted. I'll have to look into this.

[Diocletian]

My computer doesn't have a virus protection at the moment, so if you ever wanted to tear down the walls of my fortress, this is your chance. I won't be buying anything for a while so hopefully this cools down.

[OminousCloud]

My computer doesn't have a virus protection at the moment, so if you ever wanted to tear down the walls of my fortress, this is your chance. I won't be buying anything for a while so hopefully this cools down.

Lol, not much of a fortress then xD

Many people from this forum have recommended Avast Home Edition (http://www.avast.com/eng/avast_4_home.html), it's freeee and is apparently quite good.

[Diocletian]

Lol, not much of a fortress then xD

Many people from this forum have recommended Avast Home Edition (http://www.avast.com/eng/avast_4_home.html), it's freeee and is apparently quite good.

Even a fortress needs money to stay strong. :((