Fake Chat Screen Malware

A new malware in the form of fake chat screen is attacking online banking customers to deceive in verifying bogus transactions.  The attack waits until the unsuspecting online banking customers login before telling them that “security checks” need to be performed. On a chat screen operating through a mix of HTML injections and Javascript, the victims will think they are speaking to customer support. In reality they are chatting with a cyber criminal that is attempting to get them to provide names, passwords and other banking credentials. At the same time, Klein claims attackers have meshed Man in the Browser techniques with phishing abilities and the Shylock malware platform to hijack accounts in real time. By asking users to sign off on fake transactions in the background, customers are duped without even knowing it.