Today [10]

tom982 said:

Just think of the money :)

Recently, McAfee hasn't done too badly actually :) A test was recently conducted on how well AVs and other online security tools (anti keylogging etc.) coped with MITB (Man In The Browser) attacks, the results can be viewed here:

http://www.mrg-effitas.com/wp-conten...port-20122.pdf

MSE got straight fails Okay, McAfee's score wasn't great, but it was better than MSE. I'm seriously considering switching to Kaspersky now. The test was done by BBC and MRG Effitas, in this investigation:

Interesting read and watch Tom :)

I also have TDSS Anti-Rootkit Killer and Malwarebytes in conjuction with Microsoft Security Essentials; I don't do online banking so maybe I have less to worry about with this 'financial malware'.

tom982 said:

Just think of the money :)

Recently, McAfee hasn't done too badly actually :) A test was recently conducted on how well AVs and other online security tools (anti keylogging etc.) coped with MITB (Man In The Browser) attacks, the results can be viewed here: http://www.mrg-effitas.com/wp-conten...port-20122.pdf

MSE got straight fails Okay, McAfee's score wasn't great, but it was better than MSE. I'm seriously considering switching to Kaspersky now.

The main question I always have is how someone got infected in the first place. This is something that annoys me to no end with news articles like this... they focus almost exclusively on how the threat goes into action and how well anti-virus software will combat it. But... I don't see much at all about how the infection gets on your computer to begin with.

A firewall + Windows Vista/7 is good enough to block direct random attacks from the outside. If you run some software that you allow to poke a hole through the firewall (like Vuze), that will introduce a possible risk. If you roam around the Internet freely, without caution, that's a good way to get infected if your anti-virus isn't robust or up to date. If you download programs not vetted by a trusted website, that can open the door as well. Last, but not least, I think the easiest way to get infected is by getting an e-mail from a colleague/friend/associate with an infected attachment.

If you don't do that kind of risky behavior, you should be threat free. Not that you ought to drop your guard, though. I do all of my on-line banking and purchases from a browser dedicated for that purpose. For everything else, I use a separate browser.


Folks like the authors of MITB (Man In The Browser) must find a way to get their payload (trojan) onto your computer. Who opens up unsolicited e-mails these days? I imagine that what MITB might do is find a way to infect a legitimate website and then once you're logged in, find a way to get you to accept something like a cookie or a plug-in.

I know Tom, if one form of malware is complicated as the one above, then it may many other forms of malware can be equally as complex

Hopefully, the banks will become even more aware of the risk associated with the virtual world of the Internet, and learn how to protect their customers further.