AusCERT 2011: Mobile banking malware on the rise

18.05.2011

"Distributed command and control systems enable survivability and increases resistance to takeover attempts and ensuring there are many hosts out there to control the botnet," he said.

"The botnet market has evolved from a one-stop shop into segments."

Identifying a variety of myths associated with mobile banking malware, Klein said complacency by consumers is a dangerous trend that will only become worse once mobile banking increases in popularity.

"Sandboxing provides a malware free device, mobile apps are controlled, and there's no money to steal in mobile apps are all myths will be proven wrong," he said.

Citing Zeus attacks as one method that could be used to intercept Blackberry, Symbian and Windows Phone 7 devices, Klein said these attacks have been used to infiltrate banks in countries as varied as Spain, Poland and Germany, saying mobile devices will be even easier to infiltrate.