I don’t think the hysterical tone of the latter is quite suited to this article, nor of government policy; “infection” is only one of many problems and will narrow how the risks are considered.
ENISA: banks should assume customer PCs are infected
By Stewart Mitchell
Posted on 6 Jul 2012 at 15:09
The European cyber security agency has warned banks to stop assuming that customers’ computers are free from malware and consider offline checks before making large transactions.
The warning from the European Network and Information Security Agency comes in the wake of a series of multimillion pound heists on wealthy bank account holders.
“Banks really should change their stance and assume that all of the customer computers are infected, otherwise it’s difficult to be secure,” a spokesperson for ENISA told PC Pro. “With that in mind, you need to secure the devices and also have a cross check, because they can’t just assume customer computers are clean… The banks should take protection measures to deal with this.”
via ENISA: banks should assume customer PCs are infected | Security | News | PC Pro.
HT: @bensummers
Leave a Reply