{"id":5363,"date":"2016-03-11T05:57:39","date_gmt":"2016-03-11T10:57:39","guid":{"rendered":"https:\/\/me-en.kaspersky.com\/blog\/?p=5363"},"modified":"2019-11-15T15:24:14","modified_gmt":"2019-11-15T11:24:14","slug":"banking-trojans-bypass-2fa","status":"publish","type":"post","link":"https:\/\/me-en.kaspersky.com\/blog\/banking-trojans-bypass-2fa\/5363\/","title":{"rendered":"How banking Trojans bypass two-factor authentication"},"content":{"rendered":"

Two-factor authentication with SMS is widely used by banking institutions. Of course, this measure works better than a mere password but it\u2019s not unbreakable. Security specialists\u00a0found out<\/a>\u00a0how it can be fooled 10 years ago, when this protection measure was just gaining popularity.<\/p>\n

So did malware creators. That\u2019s why banking Trojan developers breach one-time SMS passwords with ease. Here is how it works:<\/p>\n

1. A user launches legitimate banking app on a smartphone.<\/p>\n

2. A Trojan detects, which app is used, and overlays its interface with a fake copy. The fraudulent screen looks just like the real one.<\/p>\n

3. The victim enters login and password in the fake app.<\/p>\n

4. The Trojan sends user\u2019s credentials to criminals. They use these data to login into the user\u2019s banking app.<\/p>\n

5. Then the culprits request a financial transaction to their account.<\/p>\n

6. Victim\u2019s phone receives SMS with one-time password.<\/p>\n

\n

What is Two-Factor Authentication? Where Should You Use It? http:\/\/t.co\/4XF3yr5qBO<\/a> #CyberSecurity<\/a> #InfoSec<\/a><\/p>\n

\u2014 Kaspersky Lab ME (@KasperskyME) June 10, 2014<\/a><\/p><\/blockquote>\n