Quote: Originally Posted by tom982
Just think of the money
Recently, McAfee hasn't done too badly actually
A test was recently conducted on how well AVs and other online security tools (anti keylogging etc.) coped with MITB (Man In The Browser) attacks, the results can be viewed here: http://www.mrg-effitas.com/wp-conten...port-20122.pdf
MSE got straight fails
Okay, McAfee's score wasn't great, but it was better than MSE. I'm seriously considering switching to Kaspersky now.
The main question I always have is how someone got infected in the first place. This is something that annoys me to no end with news articles like this... they focus almost exclusively on how the threat goes into action and how well anti-virus software will combat it. But... I don't see much at all about how the infection gets on your computer to begin with.
A firewall + Windows Vista/7 is good enough to block direct random attacks from the outside. If you run some software that you allow to poke a hole through the firewall (like Vuze), that will introduce a possible risk. If you roam around the Internet freely, without caution, that's a good way to get infected if your anti-virus isn't robust or up to date. If you download programs not vetted by a trusted website, that can open the door as well. Last, but not least, I think the easiest way to get infected is by getting an e-mail from a colleague/friend/associate with an infected attachment.
If you don't do that kind of risky behavior, you should be threat free. Not that you ought to drop your guard, though. I do all of my on-line banking and purchases from a browser dedicated for that purpose. For everything else, I use a separate browser.
Folks like the authors of MITB (Man In The Browser) must find a way to get their payload (trojan) onto your computer. Who opens up unsolicited e-mails these days? I imagine that what MITB might do is find a way to infect a legitimate website and then once you're logged in, find a way to get you to accept something like a cookie or a plug-in.