Zeus, SpyEye, Emotet. What do those names mean to you? If you guessed characters from the latest instalment of the Marvel superhero franchise, you’d be wrong (although, great guess). In fact, much as they sound like supervillains, they’re all high-profile banking trojans.
Since they emerged in the mid-noughties, banking trojans have morphed into one of the most dangerous cyber threats out there. But what are they? And how can you protect your business?
What is a banking trojan?
Let’s start by addressing what a banking trojan is. A banking trojan is a particularly nasty form of trojan horse, one designed to gain access to confidential information processed by online banking systems.
Banking trojans typically come in two forms. One uses a ‘backdoor’ to gain access to the victim’s computer, while the other copies a victim’s credentials by spoofing a financial institution’s login webpage.
How do they work?
As we’ve already mentioned, a banking trojan is a type of trojan horse. And, as the name suggests, it works in much the same way as the Greek mythological horse. A trojan horse will look and work like a legitimate piece of software until it’s installed on a device. However, once it’s installed, it can be used to access files and systems, steal data or credentials, and even control the host device.
A banking trojan performs the same tasks, only it’s aimed solely at causing financial damage. It can steal your banking credentials, make unauthorised transactions, or withdraw funds to the attackers’ accounts.
Why are banking Trojans so dangerous?
There are a couple of reasons that banking trojans are an exceptionally dangerous form of malware. First, there’s the problem that they’re usually very well disguised as legitimate software, which makes identifying them tricky for anyone who isn’t a cyber expert.
Second, there’s the damage they can do. A successful banking trojan attack can be financially ruinous for the victim: in the worst-case scenario, it gives a cybercriminal total access to your bank accounts and money.
How do you know when you’ve been hit?
A banking trojan might be difficult to spot, but it’s not impossible. There are a few telltale signs to keep an eye out for.
- New or unexpected forms in your bank accounts. For example, a request for card numbers or pins
- Missing files
- Anti-virus or anti-malware software that stops working
- Unexpected pop-up windows
- A device that seems to perform tasks when no one is using it
- Applications that are slow to load or simply stop working
- Spam originating from your email accounts
- Poor performance from your device(s)
It’s important to note that none of these things necessarily mean you’ve been successfully hacked, but they could be clues that something isn’t right. So, if in doubt, call in the professionals.
What can you do to protect your business?
As with many cyber threats, the consequences of a successful banking trojan attack can be severe. But, the steps needed to protect your business are all relatively simple.
Use multi-factor authentication
Multi-factor authentication (MFA) is a security tool that requires you to provide two or more verification methods to sign into an application. Instead of just asking for your username and password, MFA adds some extras, like a randomly generated pin code sent by SMS, a thumbprint, or a piece of memorable information known only to the user.
The idea behind MFA is very simple: the more locks you have on the door, the harder it is for an intruder to break in. Think of it as adding a cyber deadbolt, a door chain lock, and maybe some cameras for good measure to keep the bad guys out.
Train staff how to spot the signs
Research shows that as much as 90% of cyber breaches can be put down to human error. It’s not difficult to understand why. Very few of us are cybersecurity experts and if you aren’t aware of what a cyber threat looks like, you’re much more likely to fall foul of them.
The best way to beat this is through training. Training can help your staff better recognise and understand the threats they face. And, more importantly, learn how to counter them.
What this training looks like will differ depending on your business and the knowledge within it. For some businesses, it’s a case of starting from scratch with the very basic stuff. Meanwhile for other firms, addressing specific weak spots will be much more effective.
To learn more about the hows and whys of staff security training, we recommend you read this.
Patch software regularly
Patching (or regular updates in plain English) is the simplest thing you can do to improve your organisation’s cybersecurity. Over time, even the best software develops vulnerabilities, suffers a breach, or simply becomes outdated. And, to ensure cybercriminals don’t have an easy route into their clients’ businesses, software developers release security patches.
The trouble is, this is only as effective as the number of customers who regularly update their operating systems and software. Fortunately, doing so is simple. All it requires is that you check for updates every few days or just turn on the auto-update setting for all company devices.
Use a password manager
Many banking trojans use a keylogger – a program that records your keystrokes so cybercriminals can steal your PIN or password. By using a password manager, which doesn’t require you to type anything, you make keyloggers useless.
Only download files from trusted sources
This should go without saying, but if you’re at all unsure about the origin of a file or piece of software don’t download it. And ensure this rule is followed throughout your business.
Use all the security features offered by your bank
Finally, use all the security features your bank offers. If your bank offers MFA (virtually all of them do) for sign-in, use it. Many business-oriented banks also have app stores full of free or low-cost cybersecurity features so, you guessed it, use them. These little extras could be the difference between being successfully hacked or not.
Protecting your business on a budget is tricky. Calling in the experts or investing in the latest tools is expensive. So what can you do? CyberSmart Active Protect secures your business around the clock with no need for costly consultants, tools or an in-house team. Try it today.
