Risk Management

02:07 PM
Connect Directly
Facebook
Google+
Twitter
RSS
E-Mail
50%
50%

Finovate 2013: We're All Infected With Malware

Versafe's Jens Hinrichsen highlights the massive wave of malware problems permeating computers and mobile devices — including “drive-by malware” that can follow you as you continue your internet browsing and open applications.

Jens Hinrichsen made quite a scene at Finovate Fall 2013 when, during his morning demo, he announced to the room that everyone was infected after visiting the Finovate homepage.

He was kidding, but he made his point: A lot of sites have malware that infect your computer or mobile device simply by visiting them. Without clicking on a thing, you are an easy victim of “drive-by malware” that can follow you as you continue your internet browsing and open applications.

His firm, Versafe, supplies hidden codes to companies so they can protect users from malware on their site, apps on mobile device, even the mobile browser. As Hinrichsen explains it, we’re all infected, badly, but there’s not much your bank can do about it. What they can do is protect their own site and applications, challenging the malware onto their own turf.

“It’s a solution that doesn’t involve an end user,” he said in an interview. “In order to protect us the solution has been for the end-users to download software, but that comes with whole host of issues. Maybe 1, 5, or 15% of the user base will download the security, but even so attackers are already trained to undo it. The only way to protect the user base is to take an approach where we’re bringing that external fight to the application, on mobile and web.”

Most importantly, and it bears emphasis, Versafe is not a downloaded solution. It exists as pieces of code on the website (even if opened in a mobile browser) and included in mobile updates.

Mobile Malware

Direct fraud losses have been creeping downward – as a result of a lot of investments; however, Hinrichsen says companies come to them because they make systems more efficient. “We’re taking all that crud infecting end users to ultimately cash out, there’s a big spike in cross-device attacks (mostly in EU) that will typically migrate in US. So they’re coming to us because they are spending a lot of money to protect end users.”

The prevalence of mobile malware is absolutely skyrocketing in the past 4-5 months. Don’t think you’re safe — you’re not. The extraordinary spike of mobile malware infections is certainly grabbing the attention of financial institutions that are often the target of fraudulent apps and hidden malware on their trusted websites.

[Hackers to Exchanges: You’re Next]

“Within a mater of days we can protect a financial organization’s entire user base,” says Hinrichsen. “We can protect against all malware and threat types. And we do it across all devices, web and mobile channels, and we do it all in a transparent way … The fundamental key is we can detect any type of malicious data stream or scripts being injected into application from market … The fundamental piece we’re bringing to market is the protection piece code, encrypting all key data in real time in a way that even if attackers are able to get credentials (password, challenge questions, etc), they are able to take data and send it off, but it’s encrypted and the decrypt it, it needs to be done by the private key that’s on our customers' systems.”

Versafe boasts over 50 million secured customers, which includes the clients of over 30 European financial service firms, all the major banks of Israel, in addition to others in payment and money transfer services.

[Check out the Advanced Threat Confidential: 14 Lessons Learned from Real Cyber Attacks session at Interop on October 4.] Becca Lipman is Senior Editor for Wall Street & Technology. She writes in-depth news articles with a focus on big data and compliance in the capital markets. She regularly meets with information technology leaders and innovators and writes about cloud computing, datacenters, ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Becca L
50%
50%
Becca L,
User Rank: Author
9/17/2013 | 3:47:26 PM
re: Finovate 2013: We're All Infected With Malware
It is surprising we don't hear too much about it. How does someone even report malware on their phone? Would a company tell us if their site gave was targeted? This might all be pushed under the rug on a consumer level.
Greg MacSweeney
50%
50%
Greg MacSweeney,
User Rank: Apprentice
9/15/2013 | 6:28:23 AM
re: Finovate 2013: We're All Infected With Malware
Mobile is the next logical step in the cyber wars. Mobile is much more pervasive in Europe than it is here, but make no mistake, mobile malware is coming to the US too.
Jonathan_Camhi
50%
50%
Jonathan_Camhi,
User Rank: Author
9/13/2013 | 6:18:06 PM
re: Finovate 2013: We're All Infected With Malware
The mobile malware issues in Europe have been going on for more than a year now. I'm actually surprised we haven't seen more instances here yet.
Register for Wall Street & Technology Newsletters
White Papers
Current Issue
Wall Street & Technology - July 2014
In addition to regular audits, the SEC will start to scrutinize the cyber-security preparedness of market participants.
Video
Inside Abel Noser's Trading Floor
Inside Abel Noser's Trading Floor
Advanced Trading takes you on an exclusive tour of Abel Noser's New York trading floor, where the agency broker known for transaction cost analysis, is customizing algorithms for the buy side, while growing its fixed income trading and transitions business.