Web ads threat to bank security

London Evening Standard | July 5 2004

Hackers are using pop-up ads to steal bank details from home computers, it was revealed yesterday.

They have planted a 'trojan' virus inside the bogus ads, which appear on screen without any warning.

Clicking on the close button to get rid of the advert triggers the virus, which then attempts to install itself on the computer.

It waits until the user logs on to their Internet bank account, then it steals personal details such as passwords, by reading key strokes. These are then passed back to the hacker.

The virus, named 'pwsteal.refest', marks a new level of sophistication for Internet fraudsters. Until now, hackers have relied on users visiting bogus bank sites after receiving an e-mail asking them to update their details.

Almost 50 banks around the world, including Lloyds TSB and Barclays, have been targeted in the latest attack. It is unclear how many customers have fallen victim to the virus.

A spokeswoman for the National Hi-Tech Crime Unit said: 'This is a type of virus we have not seen before but it isn't a surprise.

'When criminals find that one thing doesn't work they will try another way.'

She added that cyber bank crime - known as 'phishing' - was on the rise. 'Since last September we have seen a massive increase in the number of attempts to try to dupe people out of their bank information,' she said.

Security experts said updating virus software was the best protection. Barclays added it was aware of the latest virus but could not disclose how many customers had been affected.