Technique against virtual keyboards as used by ABSA bank

kilos

kilos

Expert Member
Joined
Jun 28, 2005
Messages
2,810
Reaction score
38
http://blog.hispasec.com/virustotal/9
Trust the security team at ABSA are their to find another solution.
FNB uses the Digitag device just as the safe Swiss Banks do
https://www.fnb.co.za/personal/transact/accessyouraccounts/digitag.html

New trojan banker combines key logging with an optimized technique for virtual keyboards.

Every time the user clicks in the virtual keyboard, the trojan performs a series of small screen captures of the area that surrounds the cursor. It also adds a small red arrow that pinpoints the exact place the user clicked, so that the attacker can see clearly the key the user selected.

It has been specifically designed for banking institutions in Argentina, Bolivia, Brazil, Cape Verde, Spain, USA, Paraguay, Portugal, Uruguay, and Venezuela.

In-Depth Analysis: New technique against virtual keyboards.pdf (PDF)

In the following URL you will find a video/flash that illustrates the performance of the trojan in an infected system and the data sent to the attacker: Cajamurcia Video
 
I've debated signing up for FNB's digitag but I only ever access the site from my own machines and have inContact set up to let me know about practically everything that goes on there so I'm not convinced its worth the extra hassle.
 
bugger these scammers and their trojans...

And do stay away from cybercafe's... you never know what is loaded onto that PC...
 
I have two digi-tags one for me and one for my wife. Even the digi-tag it self has a pin code you need to enter before it generates the "access code". Been using them for must about 2 years now without any problems.
 
I've always thought a system that uses time-sensitive pins over sms (Kinda like RSA SecurID) were a great idea.
 
ABSA's internet banking interface is probably the worst compared to others. Since my wife moved to FNB from ABSA I've been frustrated on how user-friendly FNB's interface is compared to mine using ABSA. ABSA tries to be all fancy and secure and ends up making the facility complicated - and it cost me a subscription fee every month too, whereas FNB is free!
 
Im just surprised how hackers would want to break into SA bank accounts, i mean, dont they have bigger fish to fry... and inter-bank transfers take ages, so by the time they have done anything the end user will find out.
 
Trust me, Internet banking in South Africa is leaps and bounds ahead of Ireland's banks.

In Ireland, you have to phone in to get a benificiary added, and wait 3 days, before you can actually do a transfer using Internet Banking.
Its beyond painful.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X