EU to Banks: Assume All PCs Are Infected
Summary: The European Network and Information Security Agency advised financial institutions to "assume all PCs are infected" in an advisory responding to a McAfee and Guardian Analytics "High Roller" report on custom ZeuS and SpyEye Trojans that defeat hardware tokens, one-time transaction codes and smartcard readers. ENISA said basic two-factor authentication does not stop man-in-the-middle or man-in-the-browser attacks, and cited ZeuSTracker data showing only about 38 percent of ZeuS malware is detected by antivirus software.
Key Takeaway: The High Roller malware initiates transfers to money mule or prepaid accounts the moment a victim logs in, and U.S. companies of all sizes have no legal protection from losses when cyberheists strike, unlike consumers.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026