New Banking Malware Launches Fake Live Chat

A new breed of online banking malware has developed a scary skill — it talks. If you want to hold onto your cash, don't talk back.

The clever cyberattack exploits the live chat feature on banking websites in an attempt to pressure victims into divulging their financial information, Amit Klein from the security firm Trusteer  explained.

When people log in to their online banking site, this new malware, using a series of fake HTML and JavaScript injections, stalls their session and informs them "security checks are being performed."

For Subscribers

FOR SUBSCRIBERSCBP leaders cut out of Trump ad buy decision

FOR SUBSCRIBERSAmerican passenger drafted goodbye texts to her family as Flydubai plane plummeted

FOR SUBSCRIBERSCornell rape allegation pushes embattled New York prosecutor into national spotlight

FOR SUBSCRIBERSAbdul El-Sayed tries to woo MAHA voters as Democrats seek inroads with RFK’s supporters

FOR SUBSCRIBERSKratom-like substances are popping up in a typically benign supplement

FOR SUBSCRIBERSGOP super PAC increases its spending for Sen. Jon Husted in tough Ohio race

FOR SUBSCRIBERSRecords reveal tumultuous marriage between slain New York Times executive and wife

FOR SUBSCRIBERSFrom clean energy warrior to ‘wall of shame,’ James Talarico reverses on a fossil fuel money pledge

FOR SUBSCRIBERSCongressional staff planned official trip with luxury stops in Italy and France weeks before election

FOR SUBSCRIBERSA harrowing ordeal aboard an Israel-bound plane

FOR SUBSCRIBERSOpenAI CEO Sam Altman to skip congressional hearing on rogue AI agents

FOR SUBSCRIBERSKey DOJ lawyers departed Trump ‘grand conspiracy’ probe amid pressure to produce, source says

FOR SUBSCRIBERSTrump’s new AI chatbot often links to a site launched under Clinton 26 years ago

FOR SUBSCRIBERSAt MAHA summit, industry CEOs the movement once vilified take the stage

FOR SUBSCRIBERSThis Paralympian has two goals: Win medals and give away $500,000 to her teammates

The site, using convoluted language, then tells victims: "The system couldn't identify your PC. You will be contacted by a representative to confirm your personality. Please pass the process of additional verification otherwise your account will be locked. Sorry for any inconvenience, we are carrying about security of our clients. "

If the poor grammar doesn't raise a red flag, the malware attack then presents users with a live online chat session that allows the hackers to "perform real time fraud by enticing the victim to sign/verify fraudulent transactions."

For Subscribers

FOR SUBSCRIBERSCBP leaders cut out of Trump ad buy decision

FOR SUBSCRIBERSAmerican passenger drafted goodbye texts to her family as Flydubai plane plummeted

FOR SUBSCRIBERSCornell rape allegation pushes embattled New York prosecutor into national spotlight

FOR SUBSCRIBERSAbdul El-Sayed tries to woo MAHA voters as Democrats seek inroads with RFK’s supporters

FOR SUBSCRIBERSKratom-like substances are popping up in a typically benign supplement

FOR SUBSCRIBERSGOP super PAC increases its spending for Sen. Jon Husted in tough Ohio race

FOR SUBSCRIBERSRecords reveal tumultuous marriage between slain New York Times executive and wife

FOR SUBSCRIBERSFrom clean energy warrior to ‘wall of shame,’ James Talarico reverses on a fossil fuel money pledge

FOR SUBSCRIBERSCongressional staff planned official trip with luxury stops in Italy and France weeks before election

FOR SUBSCRIBERSA harrowing ordeal aboard an Israel-bound plane

FOR SUBSCRIBERSOpenAI CEO Sam Altman to skip congressional hearing on rogue AI agents

FOR SUBSCRIBERSKey DOJ lawyers departed Trump ‘grand conspiracy’ probe amid pressure to produce, source says

FOR SUBSCRIBERSTrump’s new AI chatbot often links to a site launched under Clinton 26 years ago

FOR SUBSCRIBERSAt MAHA summit, industry CEOs the movement once vilified take the stage

FOR SUBSCRIBERSThis Paralympian has two goals: Win medals and give away $500,000 to her teammates

Given this browser exploit, Klein does not have a positive outlook on the future of Web browser security.

"What's clear now is that the barbarians are taking control of the browser," he wrote.

To keep malware authors at bay, it's crucial to keep your browser up to date and also run strong anti-virus software on your computer, a list of which can be found here. And if you come across unsolicited messages, especially ones with grammar and spelling mistakes, be suspicious and don't click any links.

• 5 Looming Threats That Keep Security Experts Up at Night
• OMG! Arizona Parents Could Gain Access to Kids' Texts
• Be Safe: Tips for Online Bankers