20KB trojan turns on bank customers in Singapore, Indonesia

The infamous Tinba trojan has been updated and is now targeting people using online banking in the Asia Pacific region. Malware bods from security company F5 refer to the fifth iteration of the Windows software nasty as Tinbapore since it began moving 70 percent of its infection base to the region. About 30 percent of …

[mythicalduck]

The user code injects?

I appreciate the graphic isn't from El Reg, but according to it, the user sends out the malware and performs their own code injects! Crazy users!

[Anonymous Coward]

Don't see how it could work

Every single bank in Singapore (and there aren't many) employs two-factor authentication, in form of either a hardware token or sms sent to a mobile phone. Even if you managed to steal someone's login credentials, you won't even be able to see full account numbers, let alone transfer anything out - so I'm wondering what's the point in developing the trojan

[Maksim]

Every single bank in Singapore (and there aren't many) employs two-factor authentication, in form of either a hardware token or sms sent to a mobile phone. Even if you managed to steal someone's login credentials, you won't even be able to see full account numbers, let alone transfer anything out - so I'm wondering what's the point in developing the trojan

[frank ly]

How's that anonymity working out for you?

[Maksim]

that's probably my third comment in as many years, cut me some slack :)

[Geoff May]

You'll never get any badges at that rate.

[Midnight]

Badges? We ain't got no badges. We don't need no badges. I don't have to show you any stinkin' badges!

[Elmer Phud]

Nice

20kb -- nice work, could be hidden almost anywhere.

[Anonymous Coward]

As Elton sang

Hold me closer, Tinybanker