Next generation of banking trojans
The Register reports that the bad guys steped up quite a bit.
Now quite sophisticated tactics:
- spreading Trojans via JS and PDF flaws from somewhat legimate pages
- reading keystrokes / logins
- withdrawing only from positive accounts, trying to obscure the withdraws
- taking screenshots (sounds like partial biomechanical processing)
- Using money mules to obfuscate the money trail
It’s a dangerous internet out there