ARN

'Man in the browser' is new threat to online banking

'Man in the browser' attacks will increase just as banks are curbing keystroke logging, phishing and pharming

Hackers infecting PCs with malware that is only triggered when they access their bank accounts, is the latest threat to online banking, according to security software supplier F-Secure.

Hackers are acting as a 'man in the browser' by intercepting HTML code in the web browser. As bank security measures are curbing more traditional threats such as keystroke logging, phishing and pharming, F-Secure warned the 'man in the browser' attack will increase.

Once a user's PC is infected, the malicious code is only triggered when the user visits an online bank. The 'man in the browser' attack then retrieves information, such as logins and passwords, entered on a legitimate bank site. This personal data is sent directly to an FTP site to be stored, where it is sold to the highest bidder.

Security products using behavioral analysis were the best solution against such attacks, because the malware was only distributed to the users of specific banking sites, said Mikko Hypponen, chief research officer at F-Secure. This meant anti-malware software vendors were unlikely to be able to quickly release codes to tackle all the new threats.

Following the enhancements that banks have made to authentication on their websites, "phishing attacks are becoming less and less effective and attacks of the 'Man in the Browser' are set to increase", he warned.

Nominations for the 2012 ARN IT Industry Awards open on Tuesday, June 12.

More about: F-Secure

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the ARN comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Whitepapers
Latest Stories
Community Comments
rhs_login_lockGet exclusive access to ARN's news, research and invitation only events.
ARN Distributor Directory
Find distributors by name | vendor | location
Channel Deals
/deals/aca-pacific/436_receive-15-off-sap-crystal-server-and-designer
ACA Pacific

Receive 18% off SAP Crystal Server and Designer Licenses. Offer Ends June 28th, 2012.

More details »
ARN Vendor Directory
Find vendors by name | category

iAsset is a channel management ecosystem that automates all major aspects of the entire sales,marketing and service process, including data tracking, integrated learning, knowledge management and product lifecycle management.