CNET's News.com reports on a panel discussion at the RSA Conference 2006:
"We have recently seen a move away from stealing user name and passwords," Shipp said. The new "bank-stealing Trojans" wait until the victim has actually logged in to their bank. "It then just transfers the money out."
"All of the authentication, little keys you have to have in your hand, biometrical things, it doesn't matter. The bad guy just waits until you're there and then takes the money out," Shipp said.
This new type of Trojan is on the rise and is currently No. 3 on the list of most common threats, according to Shipp who works at MessageLabs as senior antivirus technologist.
I guess we will all end up surfing with VMware's Browser Appliance.
